Jul 14 23:29:35.655667 kernel: Linux version 5.15.187-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Jul 14 20:42:36 -00 2025 Jul 14 23:29:35.655682 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=d9618a329f89744ce954b0fa1b02ce8164745af7389f9de9c3421ad2087e0dba Jul 14 23:29:35.655688 kernel: Disabled fast string operations Jul 14 23:29:35.655692 kernel: BIOS-provided physical RAM map: Jul 14 23:29:35.655696 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ebff] usable Jul 14 23:29:35.655700 kernel: BIOS-e820: [mem 0x000000000009ec00-0x000000000009ffff] reserved Jul 14 23:29:35.655706 kernel: BIOS-e820: [mem 0x00000000000dc000-0x00000000000fffff] reserved Jul 14 23:29:35.655710 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007fedffff] usable Jul 14 23:29:35.655714 kernel: BIOS-e820: [mem 0x000000007fee0000-0x000000007fefefff] ACPI data Jul 14 23:29:35.655718 kernel: BIOS-e820: [mem 0x000000007feff000-0x000000007fefffff] ACPI NVS Jul 14 23:29:35.655722 kernel: BIOS-e820: [mem 0x000000007ff00000-0x000000007fffffff] usable Jul 14 23:29:35.655726 kernel: BIOS-e820: [mem 0x00000000f0000000-0x00000000f7ffffff] reserved Jul 14 23:29:35.655730 kernel: BIOS-e820: [mem 0x00000000fec00000-0x00000000fec0ffff] reserved Jul 14 23:29:35.655734 kernel: BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved Jul 14 23:29:35.655740 kernel: BIOS-e820: [mem 0x00000000fffe0000-0x00000000ffffffff] reserved Jul 14 23:29:35.655745 kernel: NX (Execute Disable) protection: active Jul 14 23:29:35.655749 kernel: SMBIOS 2.7 present. Jul 14 23:29:35.655754 kernel: DMI: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020 Jul 14 23:29:35.655758 kernel: vmware: hypercall mode: 0x00 Jul 14 23:29:35.655762 kernel: Hypervisor detected: VMware Jul 14 23:29:35.655768 kernel: vmware: TSC freq read from hypervisor : 3408.000 MHz Jul 14 23:29:35.655772 kernel: vmware: Host bus clock speed read from hypervisor : 66000000 Hz Jul 14 23:29:35.655777 kernel: vmware: using clock offset of 2708600687 ns Jul 14 23:29:35.655781 kernel: tsc: Detected 3408.000 MHz processor Jul 14 23:29:35.655786 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 14 23:29:35.655791 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 14 23:29:35.655806 kernel: last_pfn = 0x80000 max_arch_pfn = 0x400000000 Jul 14 23:29:35.655812 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 14 23:29:35.655816 kernel: total RAM covered: 3072M Jul 14 23:29:35.655823 kernel: Found optimal setting for mtrr clean up Jul 14 23:29:35.655828 kernel: gran_size: 64K chunk_size: 64K num_reg: 2 lose cover RAM: 0G Jul 14 23:29:35.655832 kernel: Using GB pages for direct mapping Jul 14 23:29:35.655837 kernel: ACPI: Early table checksum verification disabled Jul 14 23:29:35.655841 kernel: ACPI: RSDP 0x00000000000F6A00 000024 (v02 PTLTD ) Jul 14 23:29:35.655846 kernel: ACPI: XSDT 0x000000007FEE965B 00005C (v01 INTEL 440BX 06040000 VMW 01324272) Jul 14 23:29:35.655851 kernel: ACPI: FACP 0x000000007FEFEE73 0000F4 (v04 INTEL 440BX 06040000 PTL 000F4240) Jul 14 23:29:35.655855 kernel: ACPI: DSDT 0x000000007FEEAD55 01411E (v01 PTLTD Custom 06040000 MSFT 03000001) Jul 14 23:29:35.655859 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 14 23:29:35.655864 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 14 23:29:35.655870 kernel: ACPI: BOOT 0x000000007FEEAD2D 000028 (v01 PTLTD $SBFTBL$ 06040000 LTP 00000001) Jul 14 23:29:35.655877 kernel: ACPI: APIC 0x000000007FEEA5EB 000742 (v01 PTLTD ? APIC 06040000 LTP 00000000) Jul 14 23:29:35.655881 kernel: ACPI: MCFG 0x000000007FEEA5AF 00003C (v01 PTLTD $PCITBL$ 06040000 LTP 00000001) Jul 14 23:29:35.655886 kernel: ACPI: SRAT 0x000000007FEE9757 0008A8 (v02 VMWARE MEMPLUG 06040000 VMW 00000001) Jul 14 23:29:35.655891 kernel: ACPI: HPET 0x000000007FEE971F 000038 (v01 VMWARE VMW HPET 06040000 VMW 00000001) Jul 14 23:29:35.655897 kernel: ACPI: WAET 0x000000007FEE96F7 000028 (v01 VMWARE VMW WAET 06040000 VMW 00000001) Jul 14 23:29:35.655902 kernel: ACPI: Reserving FACP table memory at [mem 0x7fefee73-0x7fefef66] Jul 14 23:29:35.655907 kernel: ACPI: Reserving DSDT table memory at [mem 0x7feead55-0x7fefee72] Jul 14 23:29:35.655912 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 14 23:29:35.655917 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 14 23:29:35.655921 kernel: ACPI: Reserving BOOT table memory at [mem 0x7feead2d-0x7feead54] Jul 14 23:29:35.655926 kernel: ACPI: Reserving APIC table memory at [mem 0x7feea5eb-0x7feead2c] Jul 14 23:29:35.655931 kernel: ACPI: Reserving MCFG table memory at [mem 0x7feea5af-0x7feea5ea] Jul 14 23:29:35.655955 kernel: ACPI: Reserving SRAT table memory at [mem 0x7fee9757-0x7fee9ffe] Jul 14 23:29:35.655961 kernel: ACPI: Reserving HPET table memory at [mem 0x7fee971f-0x7fee9756] Jul 14 23:29:35.655966 kernel: ACPI: Reserving WAET table memory at [mem 0x7fee96f7-0x7fee971e] Jul 14 23:29:35.655971 kernel: system APIC only can use physical flat Jul 14 23:29:35.655976 kernel: Setting APIC routing to physical flat. Jul 14 23:29:35.655981 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Jul 14 23:29:35.655986 kernel: SRAT: PXM 0 -> APIC 0x02 -> Node 0 Jul 14 23:29:35.655990 kernel: SRAT: PXM 0 -> APIC 0x04 -> Node 0 Jul 14 23:29:35.655995 kernel: SRAT: PXM 0 -> APIC 0x06 -> Node 0 Jul 14 23:29:35.656000 kernel: SRAT: PXM 0 -> APIC 0x08 -> Node 0 Jul 14 23:29:35.656006 kernel: SRAT: PXM 0 -> APIC 0x0a -> Node 0 Jul 14 23:29:35.656011 kernel: SRAT: PXM 0 -> APIC 0x0c -> Node 0 Jul 14 23:29:35.656016 kernel: SRAT: PXM 0 -> APIC 0x0e -> Node 0 Jul 14 23:29:35.656021 kernel: SRAT: PXM 0 -> APIC 0x10 -> Node 0 Jul 14 23:29:35.656025 kernel: SRAT: PXM 0 -> APIC 0x12 -> Node 0 Jul 14 23:29:35.656030 kernel: SRAT: PXM 0 -> APIC 0x14 -> Node 0 Jul 14 23:29:35.656035 kernel: SRAT: PXM 0 -> APIC 0x16 -> Node 0 Jul 14 23:29:35.656040 kernel: SRAT: PXM 0 -> APIC 0x18 -> Node 0 Jul 14 23:29:35.656045 kernel: SRAT: PXM 0 -> APIC 0x1a -> Node 0 Jul 14 23:29:35.656050 kernel: SRAT: PXM 0 -> APIC 0x1c -> Node 0 Jul 14 23:29:35.656072 kernel: SRAT: PXM 0 -> APIC 0x1e -> Node 0 Jul 14 23:29:35.656077 kernel: SRAT: PXM 0 -> APIC 0x20 -> Node 0 Jul 14 23:29:35.656082 kernel: SRAT: PXM 0 -> APIC 0x22 -> Node 0 Jul 14 23:29:35.656087 kernel: SRAT: PXM 0 -> APIC 0x24 -> Node 0 Jul 14 23:29:35.656092 kernel: SRAT: PXM 0 -> APIC 0x26 -> Node 0 Jul 14 23:29:35.656097 kernel: SRAT: PXM 0 -> APIC 0x28 -> Node 0 Jul 14 23:29:35.656101 kernel: SRAT: PXM 0 -> APIC 0x2a -> Node 0 Jul 14 23:29:35.656106 kernel: SRAT: PXM 0 -> APIC 0x2c -> Node 0 Jul 14 23:29:35.656111 kernel: SRAT: PXM 0 -> APIC 0x2e -> Node 0 Jul 14 23:29:35.656115 kernel: SRAT: PXM 0 -> APIC 0x30 -> Node 0 Jul 14 23:29:35.656121 kernel: SRAT: PXM 0 -> APIC 0x32 -> Node 0 Jul 14 23:29:35.656126 kernel: SRAT: PXM 0 -> APIC 0x34 -> Node 0 Jul 14 23:29:35.656131 kernel: SRAT: PXM 0 -> APIC 0x36 -> Node 0 Jul 14 23:29:35.656136 kernel: SRAT: PXM 0 -> APIC 0x38 -> Node 0 Jul 14 23:29:35.656141 kernel: SRAT: PXM 0 -> APIC 0x3a -> Node 0 Jul 14 23:29:35.656145 kernel: SRAT: PXM 0 -> APIC 0x3c -> Node 0 Jul 14 23:29:35.656150 kernel: SRAT: PXM 0 -> APIC 0x3e -> Node 0 Jul 14 23:29:35.656155 kernel: SRAT: PXM 0 -> APIC 0x40 -> Node 0 Jul 14 23:29:35.656160 kernel: SRAT: PXM 0 -> APIC 0x42 -> Node 0 Jul 14 23:29:35.656165 kernel: SRAT: PXM 0 -> APIC 0x44 -> Node 0 Jul 14 23:29:35.656170 kernel: SRAT: PXM 0 -> APIC 0x46 -> Node 0 Jul 14 23:29:35.656175 kernel: SRAT: PXM 0 -> APIC 0x48 -> Node 0 Jul 14 23:29:35.656180 kernel: SRAT: PXM 0 -> APIC 0x4a -> Node 0 Jul 14 23:29:35.656185 kernel: SRAT: PXM 0 -> APIC 0x4c -> Node 0 Jul 14 23:29:35.656189 kernel: SRAT: PXM 0 -> APIC 0x4e -> Node 0 Jul 14 23:29:35.656194 kernel: SRAT: PXM 0 -> APIC 0x50 -> Node 0 Jul 14 23:29:35.656202 kernel: SRAT: PXM 0 -> APIC 0x52 -> Node 0 Jul 14 23:29:35.656207 kernel: SRAT: PXM 0 -> APIC 0x54 -> Node 0 Jul 14 23:29:35.656212 kernel: SRAT: PXM 0 -> APIC 0x56 -> Node 0 Jul 14 23:29:35.656217 kernel: SRAT: PXM 0 -> APIC 0x58 -> Node 0 Jul 14 23:29:35.656223 kernel: SRAT: PXM 0 -> APIC 0x5a -> Node 0 Jul 14 23:29:35.656228 kernel: SRAT: PXM 0 -> APIC 0x5c -> Node 0 Jul 14 23:29:35.656232 kernel: SRAT: PXM 0 -> APIC 0x5e -> Node 0 Jul 14 23:29:35.656237 kernel: SRAT: PXM 0 -> APIC 0x60 -> Node 0 Jul 14 23:29:35.656242 kernel: SRAT: PXM 0 -> APIC 0x62 -> Node 0 Jul 14 23:29:35.656247 kernel: SRAT: PXM 0 -> APIC 0x64 -> Node 0 Jul 14 23:29:35.656252 kernel: SRAT: PXM 0 -> APIC 0x66 -> Node 0 Jul 14 23:29:35.656256 kernel: SRAT: PXM 0 -> APIC 0x68 -> Node 0 Jul 14 23:29:35.656261 kernel: SRAT: PXM 0 -> APIC 0x6a -> Node 0 Jul 14 23:29:35.656266 kernel: SRAT: PXM 0 -> APIC 0x6c -> Node 0 Jul 14 23:29:35.656272 kernel: SRAT: PXM 0 -> APIC 0x6e -> Node 0 Jul 14 23:29:35.656276 kernel: SRAT: PXM 0 -> APIC 0x70 -> Node 0 Jul 14 23:29:35.656281 kernel: SRAT: PXM 0 -> APIC 0x72 -> Node 0 Jul 14 23:29:35.656286 kernel: SRAT: PXM 0 -> APIC 0x74 -> Node 0 Jul 14 23:29:35.656290 kernel: SRAT: PXM 0 -> APIC 0x76 -> Node 0 Jul 14 23:29:35.656295 kernel: SRAT: PXM 0 -> APIC 0x78 -> Node 0 Jul 14 23:29:35.656304 kernel: SRAT: PXM 0 -> APIC 0x7a -> Node 0 Jul 14 23:29:35.656310 kernel: SRAT: PXM 0 -> APIC 0x7c -> Node 0 Jul 14 23:29:35.656315 kernel: SRAT: PXM 0 -> APIC 0x7e -> Node 0 Jul 14 23:29:35.656320 kernel: SRAT: PXM 0 -> APIC 0x80 -> Node 0 Jul 14 23:29:35.656325 kernel: SRAT: PXM 0 -> APIC 0x82 -> Node 0 Jul 14 23:29:35.656331 kernel: SRAT: PXM 0 -> APIC 0x84 -> Node 0 Jul 14 23:29:35.656336 kernel: SRAT: PXM 0 -> APIC 0x86 -> Node 0 Jul 14 23:29:35.656342 kernel: SRAT: PXM 0 -> APIC 0x88 -> Node 0 Jul 14 23:29:35.656347 kernel: SRAT: PXM 0 -> APIC 0x8a -> Node 0 Jul 14 23:29:35.656352 kernel: SRAT: PXM 0 -> APIC 0x8c -> Node 0 Jul 14 23:29:35.656357 kernel: SRAT: PXM 0 -> APIC 0x8e -> Node 0 Jul 14 23:29:35.656362 kernel: SRAT: PXM 0 -> APIC 0x90 -> Node 0 Jul 14 23:29:35.656368 kernel: SRAT: PXM 0 -> APIC 0x92 -> Node 0 Jul 14 23:29:35.656373 kernel: SRAT: PXM 0 -> APIC 0x94 -> Node 0 Jul 14 23:29:35.656378 kernel: SRAT: PXM 0 -> APIC 0x96 -> Node 0 Jul 14 23:29:35.656383 kernel: SRAT: PXM 0 -> APIC 0x98 -> Node 0 Jul 14 23:29:35.656388 kernel: SRAT: PXM 0 -> APIC 0x9a -> Node 0 Jul 14 23:29:35.656394 kernel: SRAT: PXM 0 -> APIC 0x9c -> Node 0 Jul 14 23:29:35.656399 kernel: SRAT: PXM 0 -> APIC 0x9e -> Node 0 Jul 14 23:29:35.656404 kernel: SRAT: PXM 0 -> APIC 0xa0 -> Node 0 Jul 14 23:29:35.656409 kernel: SRAT: PXM 0 -> APIC 0xa2 -> Node 0 Jul 14 23:29:35.656414 kernel: SRAT: PXM 0 -> APIC 0xa4 -> Node 0 Jul 14 23:29:35.656420 kernel: SRAT: PXM 0 -> APIC 0xa6 -> Node 0 Jul 14 23:29:35.656425 kernel: SRAT: PXM 0 -> APIC 0xa8 -> Node 0 Jul 14 23:29:35.656430 kernel: SRAT: PXM 0 -> APIC 0xaa -> Node 0 Jul 14 23:29:35.656436 kernel: SRAT: PXM 0 -> APIC 0xac -> Node 0 Jul 14 23:29:35.656441 kernel: SRAT: PXM 0 -> APIC 0xae -> Node 0 Jul 14 23:29:35.656446 kernel: SRAT: PXM 0 -> APIC 0xb0 -> Node 0 Jul 14 23:29:35.656451 kernel: SRAT: PXM 0 -> APIC 0xb2 -> Node 0 Jul 14 23:29:35.656456 kernel: SRAT: PXM 0 -> APIC 0xb4 -> Node 0 Jul 14 23:29:35.656461 kernel: SRAT: PXM 0 -> APIC 0xb6 -> Node 0 Jul 14 23:29:35.656467 kernel: SRAT: PXM 0 -> APIC 0xb8 -> Node 0 Jul 14 23:29:35.656472 kernel: SRAT: PXM 0 -> APIC 0xba -> Node 0 Jul 14 23:29:35.656477 kernel: SRAT: PXM 0 -> APIC 0xbc -> Node 0 Jul 14 23:29:35.656501 kernel: SRAT: PXM 0 -> APIC 0xbe -> Node 0 Jul 14 23:29:35.656506 kernel: SRAT: PXM 0 -> APIC 0xc0 -> Node 0 Jul 14 23:29:35.656511 kernel: SRAT: PXM 0 -> APIC 0xc2 -> Node 0 Jul 14 23:29:35.656516 kernel: SRAT: PXM 0 -> APIC 0xc4 -> Node 0 Jul 14 23:29:35.656521 kernel: SRAT: PXM 0 -> APIC 0xc6 -> Node 0 Jul 14 23:29:35.656527 kernel: SRAT: PXM 0 -> APIC 0xc8 -> Node 0 Jul 14 23:29:35.656532 kernel: SRAT: PXM 0 -> APIC 0xca -> Node 0 Jul 14 23:29:35.656538 kernel: SRAT: PXM 0 -> APIC 0xcc -> Node 0 Jul 14 23:29:35.656544 kernel: SRAT: PXM 0 -> APIC 0xce -> Node 0 Jul 14 23:29:35.656549 kernel: SRAT: PXM 0 -> APIC 0xd0 -> Node 0 Jul 14 23:29:35.656554 kernel: SRAT: PXM 0 -> APIC 0xd2 -> Node 0 Jul 14 23:29:35.656559 kernel: SRAT: PXM 0 -> APIC 0xd4 -> Node 0 Jul 14 23:29:35.656564 kernel: SRAT: PXM 0 -> APIC 0xd6 -> Node 0 Jul 14 23:29:35.656569 kernel: SRAT: PXM 0 -> APIC 0xd8 -> Node 0 Jul 14 23:29:35.656574 kernel: SRAT: PXM 0 -> APIC 0xda -> Node 0 Jul 14 23:29:35.656580 kernel: SRAT: PXM 0 -> APIC 0xdc -> Node 0 Jul 14 23:29:35.656585 kernel: SRAT: PXM 0 -> APIC 0xde -> Node 0 Jul 14 23:29:35.656591 kernel: SRAT: PXM 0 -> APIC 0xe0 -> Node 0 Jul 14 23:29:35.656597 kernel: SRAT: PXM 0 -> APIC 0xe2 -> Node 0 Jul 14 23:29:35.656602 kernel: SRAT: PXM 0 -> APIC 0xe4 -> Node 0 Jul 14 23:29:35.656607 kernel: SRAT: PXM 0 -> APIC 0xe6 -> Node 0 Jul 14 23:29:35.656612 kernel: SRAT: PXM 0 -> APIC 0xe8 -> Node 0 Jul 14 23:29:35.656617 kernel: SRAT: PXM 0 -> APIC 0xea -> Node 0 Jul 14 23:29:35.656623 kernel: SRAT: PXM 0 -> APIC 0xec -> Node 0 Jul 14 23:29:35.656628 kernel: SRAT: PXM 0 -> APIC 0xee -> Node 0 Jul 14 23:29:35.656633 kernel: SRAT: PXM 0 -> APIC 0xf0 -> Node 0 Jul 14 23:29:35.656639 kernel: SRAT: PXM 0 -> APIC 0xf2 -> Node 0 Jul 14 23:29:35.656645 kernel: SRAT: PXM 0 -> APIC 0xf4 -> Node 0 Jul 14 23:29:35.656650 kernel: SRAT: PXM 0 -> APIC 0xf6 -> Node 0 Jul 14 23:29:35.656655 kernel: SRAT: PXM 0 -> APIC 0xf8 -> Node 0 Jul 14 23:29:35.656660 kernel: SRAT: PXM 0 -> APIC 0xfa -> Node 0 Jul 14 23:29:35.656666 kernel: SRAT: PXM 0 -> APIC 0xfc -> Node 0 Jul 14 23:29:35.656671 kernel: SRAT: PXM 0 -> APIC 0xfe -> Node 0 Jul 14 23:29:35.656676 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] Jul 14 23:29:35.656681 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x7fffffff] Jul 14 23:29:35.656687 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000-0xbfffffff] hotplug Jul 14 23:29:35.656693 kernel: NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x7fffffff] -> [mem 0x00000000-0x7fffffff] Jul 14 23:29:35.656699 kernel: NODE_DATA(0) allocated [mem 0x7fffa000-0x7fffffff] Jul 14 23:29:35.656704 kernel: Zone ranges: Jul 14 23:29:35.656710 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 14 23:29:35.656715 kernel: DMA32 [mem 0x0000000001000000-0x000000007fffffff] Jul 14 23:29:35.656720 kernel: Normal empty Jul 14 23:29:35.656726 kernel: Movable zone start for each node Jul 14 23:29:35.656731 kernel: Early memory node ranges Jul 14 23:29:35.656736 kernel: node 0: [mem 0x0000000000001000-0x000000000009dfff] Jul 14 23:29:35.656741 kernel: node 0: [mem 0x0000000000100000-0x000000007fedffff] Jul 14 23:29:35.656748 kernel: node 0: [mem 0x000000007ff00000-0x000000007fffffff] Jul 14 23:29:35.656753 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007fffffff] Jul 14 23:29:35.656758 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 14 23:29:35.656764 kernel: On node 0, zone DMA: 98 pages in unavailable ranges Jul 14 23:29:35.656769 kernel: On node 0, zone DMA32: 32 pages in unavailable ranges Jul 14 23:29:35.656774 kernel: ACPI: PM-Timer IO Port: 0x1008 Jul 14 23:29:35.656779 kernel: system APIC only can use physical flat Jul 14 23:29:35.656785 kernel: ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1]) Jul 14 23:29:35.656790 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) Jul 14 23:29:35.656836 kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) Jul 14 23:29:35.656843 kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) Jul 14 23:29:35.656848 kernel: ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) Jul 14 23:29:35.656854 kernel: ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) Jul 14 23:29:35.656859 kernel: ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) Jul 14 23:29:35.656865 kernel: ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) Jul 14 23:29:35.656870 kernel: ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) Jul 14 23:29:35.656875 kernel: ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) Jul 14 23:29:35.656880 kernel: ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) Jul 14 23:29:35.656886 kernel: ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) Jul 14 23:29:35.656893 kernel: ACPI: LAPIC_NMI (acpi_id[0x0c] high edge lint[0x1]) Jul 14 23:29:35.656898 kernel: ACPI: LAPIC_NMI (acpi_id[0x0d] high edge lint[0x1]) Jul 14 23:29:35.656903 kernel: ACPI: LAPIC_NMI (acpi_id[0x0e] high edge lint[0x1]) Jul 14 23:29:35.656909 kernel: ACPI: LAPIC_NMI (acpi_id[0x0f] high edge lint[0x1]) Jul 14 23:29:35.656914 kernel: ACPI: LAPIC_NMI (acpi_id[0x10] high edge lint[0x1]) Jul 14 23:29:35.656919 kernel: ACPI: LAPIC_NMI (acpi_id[0x11] high edge lint[0x1]) Jul 14 23:29:35.656930 kernel: ACPI: LAPIC_NMI (acpi_id[0x12] high edge lint[0x1]) Jul 14 23:29:35.656942 kernel: ACPI: LAPIC_NMI (acpi_id[0x13] high edge lint[0x1]) Jul 14 23:29:35.656954 kernel: ACPI: LAPIC_NMI (acpi_id[0x14] high edge lint[0x1]) Jul 14 23:29:35.656967 kernel: ACPI: LAPIC_NMI (acpi_id[0x15] high edge lint[0x1]) Jul 14 23:29:35.656978 kernel: ACPI: LAPIC_NMI (acpi_id[0x16] high edge lint[0x1]) Jul 14 23:29:35.656989 kernel: ACPI: LAPIC_NMI (acpi_id[0x17] high edge lint[0x1]) Jul 14 23:29:35.657004 kernel: ACPI: LAPIC_NMI (acpi_id[0x18] high edge lint[0x1]) Jul 14 23:29:35.657018 kernel: ACPI: LAPIC_NMI (acpi_id[0x19] high edge lint[0x1]) Jul 14 23:29:35.657032 kernel: ACPI: LAPIC_NMI (acpi_id[0x1a] high edge lint[0x1]) Jul 14 23:29:35.657045 kernel: ACPI: LAPIC_NMI (acpi_id[0x1b] high edge lint[0x1]) Jul 14 23:29:35.657051 kernel: ACPI: LAPIC_NMI (acpi_id[0x1c] high edge lint[0x1]) Jul 14 23:29:35.657056 kernel: ACPI: LAPIC_NMI (acpi_id[0x1d] high edge lint[0x1]) Jul 14 23:29:35.657063 kernel: ACPI: LAPIC_NMI (acpi_id[0x1e] high edge lint[0x1]) Jul 14 23:29:35.657069 kernel: ACPI: LAPIC_NMI (acpi_id[0x1f] high edge lint[0x1]) Jul 14 23:29:35.657074 kernel: ACPI: LAPIC_NMI (acpi_id[0x20] high edge lint[0x1]) Jul 14 23:29:35.657079 kernel: ACPI: LAPIC_NMI (acpi_id[0x21] high edge lint[0x1]) Jul 14 23:29:35.657085 kernel: ACPI: LAPIC_NMI (acpi_id[0x22] high edge lint[0x1]) Jul 14 23:29:35.657090 kernel: ACPI: LAPIC_NMI (acpi_id[0x23] high edge lint[0x1]) Jul 14 23:29:35.657095 kernel: ACPI: LAPIC_NMI (acpi_id[0x24] high edge lint[0x1]) Jul 14 23:29:35.657101 kernel: ACPI: LAPIC_NMI (acpi_id[0x25] high edge lint[0x1]) Jul 14 23:29:35.657106 kernel: ACPI: LAPIC_NMI (acpi_id[0x26] high edge lint[0x1]) Jul 14 23:29:35.657111 kernel: ACPI: LAPIC_NMI (acpi_id[0x27] high edge lint[0x1]) Jul 14 23:29:35.657117 kernel: ACPI: LAPIC_NMI (acpi_id[0x28] high edge lint[0x1]) Jul 14 23:29:35.657123 kernel: ACPI: LAPIC_NMI (acpi_id[0x29] high edge lint[0x1]) Jul 14 23:29:35.657128 kernel: ACPI: LAPIC_NMI (acpi_id[0x2a] high edge lint[0x1]) Jul 14 23:29:35.657133 kernel: ACPI: LAPIC_NMI (acpi_id[0x2b] high edge lint[0x1]) Jul 14 23:29:35.657138 kernel: ACPI: LAPIC_NMI (acpi_id[0x2c] high edge lint[0x1]) Jul 14 23:29:35.657144 kernel: ACPI: LAPIC_NMI (acpi_id[0x2d] high edge lint[0x1]) Jul 14 23:29:35.657149 kernel: ACPI: LAPIC_NMI (acpi_id[0x2e] high edge lint[0x1]) Jul 14 23:29:35.657155 kernel: ACPI: LAPIC_NMI (acpi_id[0x2f] high edge lint[0x1]) Jul 14 23:29:35.657160 kernel: ACPI: LAPIC_NMI (acpi_id[0x30] high edge lint[0x1]) Jul 14 23:29:35.657166 kernel: ACPI: LAPIC_NMI (acpi_id[0x31] high edge lint[0x1]) Jul 14 23:29:35.657172 kernel: ACPI: LAPIC_NMI (acpi_id[0x32] high edge lint[0x1]) Jul 14 23:29:35.657177 kernel: ACPI: LAPIC_NMI (acpi_id[0x33] high edge lint[0x1]) Jul 14 23:29:35.657182 kernel: ACPI: LAPIC_NMI (acpi_id[0x34] high edge lint[0x1]) Jul 14 23:29:35.657188 kernel: ACPI: LAPIC_NMI (acpi_id[0x35] high edge lint[0x1]) Jul 14 23:29:35.657193 kernel: ACPI: LAPIC_NMI (acpi_id[0x36] high edge lint[0x1]) Jul 14 23:29:35.657205 kernel: ACPI: LAPIC_NMI (acpi_id[0x37] high edge lint[0x1]) Jul 14 23:29:35.657213 kernel: ACPI: LAPIC_NMI (acpi_id[0x38] high edge lint[0x1]) Jul 14 23:29:35.657218 kernel: ACPI: LAPIC_NMI (acpi_id[0x39] high edge lint[0x1]) Jul 14 23:29:35.657224 kernel: ACPI: LAPIC_NMI (acpi_id[0x3a] high edge lint[0x1]) Jul 14 23:29:35.657230 kernel: ACPI: LAPIC_NMI (acpi_id[0x3b] high edge lint[0x1]) Jul 14 23:29:35.657250 kernel: ACPI: LAPIC_NMI (acpi_id[0x3c] high edge lint[0x1]) Jul 14 23:29:35.657256 kernel: ACPI: LAPIC_NMI (acpi_id[0x3d] high edge lint[0x1]) Jul 14 23:29:35.657261 kernel: ACPI: LAPIC_NMI (acpi_id[0x3e] high edge lint[0x1]) Jul 14 23:29:35.657266 kernel: ACPI: LAPIC_NMI (acpi_id[0x3f] high edge lint[0x1]) Jul 14 23:29:35.657271 kernel: ACPI: LAPIC_NMI (acpi_id[0x40] high edge lint[0x1]) Jul 14 23:29:35.657276 kernel: ACPI: LAPIC_NMI (acpi_id[0x41] high edge lint[0x1]) Jul 14 23:29:35.657282 kernel: ACPI: LAPIC_NMI (acpi_id[0x42] high edge lint[0x1]) Jul 14 23:29:35.657287 kernel: ACPI: LAPIC_NMI (acpi_id[0x43] high edge lint[0x1]) Jul 14 23:29:35.657293 kernel: ACPI: LAPIC_NMI (acpi_id[0x44] high edge lint[0x1]) Jul 14 23:29:35.657298 kernel: ACPI: LAPIC_NMI (acpi_id[0x45] high edge lint[0x1]) Jul 14 23:29:35.657304 kernel: ACPI: LAPIC_NMI (acpi_id[0x46] high edge lint[0x1]) Jul 14 23:29:35.657309 kernel: ACPI: LAPIC_NMI (acpi_id[0x47] high edge lint[0x1]) Jul 14 23:29:35.657314 kernel: ACPI: LAPIC_NMI (acpi_id[0x48] high edge lint[0x1]) Jul 14 23:29:35.657319 kernel: ACPI: LAPIC_NMI (acpi_id[0x49] high edge lint[0x1]) Jul 14 23:29:35.657324 kernel: ACPI: LAPIC_NMI (acpi_id[0x4a] high edge lint[0x1]) Jul 14 23:29:35.657330 kernel: ACPI: LAPIC_NMI (acpi_id[0x4b] high edge lint[0x1]) Jul 14 23:29:35.657335 kernel: ACPI: LAPIC_NMI (acpi_id[0x4c] high edge lint[0x1]) Jul 14 23:29:35.657340 kernel: ACPI: LAPIC_NMI (acpi_id[0x4d] high edge lint[0x1]) Jul 14 23:29:35.657346 kernel: ACPI: LAPIC_NMI (acpi_id[0x4e] high edge lint[0x1]) Jul 14 23:29:35.657351 kernel: ACPI: LAPIC_NMI (acpi_id[0x4f] high edge lint[0x1]) Jul 14 23:29:35.657357 kernel: ACPI: LAPIC_NMI (acpi_id[0x50] high edge lint[0x1]) Jul 14 23:29:35.657362 kernel: ACPI: LAPIC_NMI (acpi_id[0x51] high edge lint[0x1]) Jul 14 23:29:35.657367 kernel: ACPI: LAPIC_NMI (acpi_id[0x52] high edge lint[0x1]) Jul 14 23:29:35.657372 kernel: ACPI: LAPIC_NMI (acpi_id[0x53] high edge lint[0x1]) Jul 14 23:29:35.657378 kernel: ACPI: LAPIC_NMI (acpi_id[0x54] high edge lint[0x1]) Jul 14 23:29:35.657383 kernel: ACPI: LAPIC_NMI (acpi_id[0x55] high edge lint[0x1]) Jul 14 23:29:35.657388 kernel: ACPI: LAPIC_NMI (acpi_id[0x56] high edge lint[0x1]) Jul 14 23:29:35.657394 kernel: ACPI: LAPIC_NMI (acpi_id[0x57] high edge lint[0x1]) Jul 14 23:29:35.657400 kernel: ACPI: LAPIC_NMI (acpi_id[0x58] high edge lint[0x1]) Jul 14 23:29:35.657405 kernel: ACPI: LAPIC_NMI (acpi_id[0x59] high edge lint[0x1]) Jul 14 23:29:35.657410 kernel: ACPI: LAPIC_NMI (acpi_id[0x5a] high edge lint[0x1]) Jul 14 23:29:35.657415 kernel: ACPI: LAPIC_NMI (acpi_id[0x5b] high edge lint[0x1]) Jul 14 23:29:35.657420 kernel: ACPI: LAPIC_NMI (acpi_id[0x5c] high edge lint[0x1]) Jul 14 23:29:35.657426 kernel: ACPI: LAPIC_NMI (acpi_id[0x5d] high edge lint[0x1]) Jul 14 23:29:35.657431 kernel: ACPI: LAPIC_NMI (acpi_id[0x5e] high edge lint[0x1]) Jul 14 23:29:35.657440 kernel: ACPI: LAPIC_NMI (acpi_id[0x5f] high edge lint[0x1]) Jul 14 23:29:35.657450 kernel: ACPI: LAPIC_NMI (acpi_id[0x60] high edge lint[0x1]) Jul 14 23:29:35.657457 kernel: ACPI: LAPIC_NMI (acpi_id[0x61] high edge lint[0x1]) Jul 14 23:29:35.657468 kernel: ACPI: LAPIC_NMI (acpi_id[0x62] high edge lint[0x1]) Jul 14 23:29:35.657474 kernel: ACPI: LAPIC_NMI (acpi_id[0x63] high edge lint[0x1]) Jul 14 23:29:35.657480 kernel: ACPI: LAPIC_NMI (acpi_id[0x64] high edge lint[0x1]) Jul 14 23:29:35.657485 kernel: ACPI: LAPIC_NMI (acpi_id[0x65] high edge lint[0x1]) Jul 14 23:29:35.657490 kernel: ACPI: LAPIC_NMI (acpi_id[0x66] high edge lint[0x1]) Jul 14 23:29:35.657495 kernel: ACPI: LAPIC_NMI (acpi_id[0x67] high edge lint[0x1]) Jul 14 23:29:35.657500 kernel: ACPI: LAPIC_NMI (acpi_id[0x68] high edge lint[0x1]) Jul 14 23:29:35.657505 kernel: ACPI: LAPIC_NMI (acpi_id[0x69] high edge lint[0x1]) Jul 14 23:29:35.657512 kernel: ACPI: LAPIC_NMI (acpi_id[0x6a] high edge lint[0x1]) Jul 14 23:29:35.657517 kernel: ACPI: LAPIC_NMI (acpi_id[0x6b] high edge lint[0x1]) Jul 14 23:29:35.657523 kernel: ACPI: LAPIC_NMI (acpi_id[0x6c] high edge lint[0x1]) Jul 14 23:29:35.657528 kernel: ACPI: LAPIC_NMI (acpi_id[0x6d] high edge lint[0x1]) Jul 14 23:29:35.657533 kernel: ACPI: LAPIC_NMI (acpi_id[0x6e] high edge lint[0x1]) Jul 14 23:29:35.657538 kernel: ACPI: LAPIC_NMI (acpi_id[0x6f] high edge lint[0x1]) Jul 14 23:29:35.657543 kernel: ACPI: LAPIC_NMI (acpi_id[0x70] high edge lint[0x1]) Jul 14 23:29:35.657548 kernel: ACPI: LAPIC_NMI (acpi_id[0x71] high edge lint[0x1]) Jul 14 23:29:35.657558 kernel: ACPI: LAPIC_NMI (acpi_id[0x72] high edge lint[0x1]) Jul 14 23:29:35.657567 kernel: ACPI: LAPIC_NMI (acpi_id[0x73] high edge lint[0x1]) Jul 14 23:29:35.657574 kernel: ACPI: LAPIC_NMI (acpi_id[0x74] high edge lint[0x1]) Jul 14 23:29:35.657579 kernel: ACPI: LAPIC_NMI (acpi_id[0x75] high edge lint[0x1]) Jul 14 23:29:35.657585 kernel: ACPI: LAPIC_NMI (acpi_id[0x76] high edge lint[0x1]) Jul 14 23:29:35.657590 kernel: ACPI: LAPIC_NMI (acpi_id[0x77] high edge lint[0x1]) Jul 14 23:29:35.657595 kernel: ACPI: LAPIC_NMI (acpi_id[0x78] high edge lint[0x1]) Jul 14 23:29:35.657600 kernel: ACPI: LAPIC_NMI (acpi_id[0x79] high edge lint[0x1]) Jul 14 23:29:35.657605 kernel: ACPI: LAPIC_NMI (acpi_id[0x7a] high edge lint[0x1]) Jul 14 23:29:35.657610 kernel: ACPI: LAPIC_NMI (acpi_id[0x7b] high edge lint[0x1]) Jul 14 23:29:35.657616 kernel: ACPI: LAPIC_NMI (acpi_id[0x7c] high edge lint[0x1]) Jul 14 23:29:35.657622 kernel: ACPI: LAPIC_NMI (acpi_id[0x7d] high edge lint[0x1]) Jul 14 23:29:35.657641 kernel: ACPI: LAPIC_NMI (acpi_id[0x7e] high edge lint[0x1]) Jul 14 23:29:35.657646 kernel: ACPI: LAPIC_NMI (acpi_id[0x7f] high edge lint[0x1]) Jul 14 23:29:35.657651 kernel: IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23 Jul 14 23:29:35.657656 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 high edge) Jul 14 23:29:35.657662 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 14 23:29:35.657667 kernel: ACPI: HPET id: 0x8086af01 base: 0xfed00000 Jul 14 23:29:35.657672 kernel: TSC deadline timer available Jul 14 23:29:35.657677 kernel: smpboot: Allowing 128 CPUs, 126 hotplug CPUs Jul 14 23:29:35.657684 kernel: [mem 0x80000000-0xefffffff] available for PCI devices Jul 14 23:29:35.657689 kernel: Booting paravirtualized kernel on VMware hypervisor Jul 14 23:29:35.657694 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 14 23:29:35.657699 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:128 nr_node_ids:1 Jul 14 23:29:35.657705 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u262144 Jul 14 23:29:35.657710 kernel: pcpu-alloc: s188696 r8192 d32488 u262144 alloc=1*2097152 Jul 14 23:29:35.657715 kernel: pcpu-alloc: [0] 000 001 002 003 004 005 006 007 Jul 14 23:29:35.657720 kernel: pcpu-alloc: [0] 008 009 010 011 012 013 014 015 Jul 14 23:29:35.657725 kernel: pcpu-alloc: [0] 016 017 018 019 020 021 022 023 Jul 14 23:29:35.657731 kernel: pcpu-alloc: [0] 024 025 026 027 028 029 030 031 Jul 14 23:29:35.657736 kernel: pcpu-alloc: [0] 032 033 034 035 036 037 038 039 Jul 14 23:29:35.657741 kernel: pcpu-alloc: [0] 040 041 042 043 044 045 046 047 Jul 14 23:29:35.657746 kernel: pcpu-alloc: [0] 048 049 050 051 052 053 054 055 Jul 14 23:29:35.657758 kernel: pcpu-alloc: [0] 056 057 058 059 060 061 062 063 Jul 14 23:29:35.657764 kernel: pcpu-alloc: [0] 064 065 066 067 068 069 070 071 Jul 14 23:29:35.657769 kernel: pcpu-alloc: [0] 072 073 074 075 076 077 078 079 Jul 14 23:29:35.657776 kernel: pcpu-alloc: [0] 080 081 082 083 084 085 086 087 Jul 14 23:29:35.657781 kernel: pcpu-alloc: [0] 088 089 090 091 092 093 094 095 Jul 14 23:29:35.657787 kernel: pcpu-alloc: [0] 096 097 098 099 100 101 102 103 Jul 14 23:29:35.657793 kernel: pcpu-alloc: [0] 104 105 106 107 108 109 110 111 Jul 14 23:29:35.664695 kernel: pcpu-alloc: [0] 112 113 114 115 116 117 118 119 Jul 14 23:29:35.664704 kernel: pcpu-alloc: [0] 120 121 122 123 124 125 126 127 Jul 14 23:29:35.664713 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515808 Jul 14 23:29:35.664719 kernel: Policy zone: DMA32 Jul 14 23:29:35.664725 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=d9618a329f89744ce954b0fa1b02ce8164745af7389f9de9c3421ad2087e0dba Jul 14 23:29:35.664732 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 14 23:29:35.664739 kernel: printk: log_buf_len individual max cpu contribution: 4096 bytes Jul 14 23:29:35.664744 kernel: printk: log_buf_len total cpu_extra contributions: 520192 bytes Jul 14 23:29:35.664750 kernel: printk: log_buf_len min size: 262144 bytes Jul 14 23:29:35.664756 kernel: printk: log_buf_len: 1048576 bytes Jul 14 23:29:35.664761 kernel: printk: early log buf free: 239728(91%) Jul 14 23:29:35.664767 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 14 23:29:35.664772 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jul 14 23:29:35.664778 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 14 23:29:35.664784 kernel: Memory: 1940392K/2096628K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 155976K reserved, 0K cma-reserved) Jul 14 23:29:35.664790 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=128, Nodes=1 Jul 14 23:29:35.664830 kernel: ftrace: allocating 34607 entries in 136 pages Jul 14 23:29:35.664837 kernel: ftrace: allocated 136 pages with 2 groups Jul 14 23:29:35.664844 kernel: rcu: Hierarchical RCU implementation. Jul 14 23:29:35.664850 kernel: rcu: RCU event tracing is enabled. Jul 14 23:29:35.664858 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=128. Jul 14 23:29:35.664863 kernel: Rude variant of Tasks RCU enabled. Jul 14 23:29:35.664869 kernel: Tracing variant of Tasks RCU enabled. Jul 14 23:29:35.664874 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 14 23:29:35.664880 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=128 Jul 14 23:29:35.664885 kernel: NR_IRQS: 33024, nr_irqs: 1448, preallocated irqs: 16 Jul 14 23:29:35.664891 kernel: random: crng init done Jul 14 23:29:35.664896 kernel: Console: colour VGA+ 80x25 Jul 14 23:29:35.664902 kernel: printk: console [tty0] enabled Jul 14 23:29:35.664908 kernel: printk: console [ttyS0] enabled Jul 14 23:29:35.664914 kernel: ACPI: Core revision 20210730 Jul 14 23:29:35.664919 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns Jul 14 23:29:35.664925 kernel: APIC: Switch to symmetric I/O mode setup Jul 14 23:29:35.664930 kernel: x2apic enabled Jul 14 23:29:35.664936 kernel: Switched APIC routing to physical x2apic. Jul 14 23:29:35.664942 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 14 23:29:35.664947 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 14 23:29:35.664953 kernel: Calibrating delay loop (skipped) preset value.. 6816.00 BogoMIPS (lpj=3408000) Jul 14 23:29:35.664959 kernel: Disabled fast string operations Jul 14 23:29:35.664965 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Jul 14 23:29:35.664970 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Jul 14 23:29:35.664976 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 14 23:29:35.664982 kernel: Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Jul 14 23:29:35.664987 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on vm exit Jul 14 23:29:35.664993 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall Jul 14 23:29:35.664999 kernel: Spectre V2 : Mitigation: Enhanced / Automatic IBRS Jul 14 23:29:35.665004 kernel: Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Jul 14 23:29:35.665011 kernel: RETBleed: Mitigation: Enhanced IBRS Jul 14 23:29:35.665016 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 14 23:29:35.665022 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 14 23:29:35.665027 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Jul 14 23:29:35.665033 kernel: SRBDS: Unknown: Dependent on hypervisor status Jul 14 23:29:35.665038 kernel: GDS: Unknown: Dependent on hypervisor status Jul 14 23:29:35.665043 kernel: ITS: Mitigation: Aligned branch/return thunks Jul 14 23:29:35.665049 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 14 23:29:35.665054 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 14 23:29:35.665061 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 14 23:29:35.665067 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 14 23:29:35.665072 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'compacted' format. Jul 14 23:29:35.665078 kernel: Freeing SMP alternatives memory: 32K Jul 14 23:29:35.665083 kernel: pid_max: default: 131072 minimum: 1024 Jul 14 23:29:35.665089 kernel: LSM: Security Framework initializing Jul 14 23:29:35.665094 kernel: SELinux: Initializing. Jul 14 23:29:35.665101 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 14 23:29:35.665107 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 14 23:29:35.665113 kernel: smpboot: CPU0: Intel(R) Xeon(R) E-2278G CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0xd) Jul 14 23:29:35.665119 kernel: Performance Events: Skylake events, core PMU driver. Jul 14 23:29:35.665124 kernel: core: CPUID marked event: 'cpu cycles' unavailable Jul 14 23:29:35.665130 kernel: core: CPUID marked event: 'instructions' unavailable Jul 14 23:29:35.665135 kernel: core: CPUID marked event: 'bus cycles' unavailable Jul 14 23:29:35.665140 kernel: core: CPUID marked event: 'cache references' unavailable Jul 14 23:29:35.665146 kernel: core: CPUID marked event: 'cache misses' unavailable Jul 14 23:29:35.665151 kernel: core: CPUID marked event: 'branch instructions' unavailable Jul 14 23:29:35.665158 kernel: core: CPUID marked event: 'branch misses' unavailable Jul 14 23:29:35.665163 kernel: ... version: 1 Jul 14 23:29:35.665168 kernel: ... bit width: 48 Jul 14 23:29:35.665174 kernel: ... generic registers: 4 Jul 14 23:29:35.665180 kernel: ... value mask: 0000ffffffffffff Jul 14 23:29:35.665185 kernel: ... max period: 000000007fffffff Jul 14 23:29:35.665191 kernel: ... fixed-purpose events: 0 Jul 14 23:29:35.665196 kernel: ... event mask: 000000000000000f Jul 14 23:29:35.665202 kernel: signal: max sigframe size: 1776 Jul 14 23:29:35.665207 kernel: rcu: Hierarchical SRCU implementation. Jul 14 23:29:35.665213 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Jul 14 23:29:35.665219 kernel: smp: Bringing up secondary CPUs ... Jul 14 23:29:35.665224 kernel: x86: Booting SMP configuration: Jul 14 23:29:35.665230 kernel: .... node #0, CPUs: #1 Jul 14 23:29:35.665235 kernel: Disabled fast string operations Jul 14 23:29:35.665241 kernel: smpboot: CPU 1 Converting physical 2 to logical package 1 Jul 14 23:29:35.665246 kernel: smpboot: CPU 1 Converting physical 0 to logical die 1 Jul 14 23:29:35.665251 kernel: smp: Brought up 1 node, 2 CPUs Jul 14 23:29:35.665257 kernel: smpboot: Max logical packages: 128 Jul 14 23:29:35.665264 kernel: smpboot: Total of 2 processors activated (13632.00 BogoMIPS) Jul 14 23:29:35.665270 kernel: devtmpfs: initialized Jul 14 23:29:35.665275 kernel: x86/mm: Memory block size: 128MB Jul 14 23:29:35.665281 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7feff000-0x7fefffff] (4096 bytes) Jul 14 23:29:35.665286 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 14 23:29:35.665292 kernel: futex hash table entries: 32768 (order: 9, 2097152 bytes, linear) Jul 14 23:29:35.665298 kernel: pinctrl core: initialized pinctrl subsystem Jul 14 23:29:35.665303 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 14 23:29:35.665309 kernel: audit: initializing netlink subsys (disabled) Jul 14 23:29:35.665315 kernel: audit: type=2000 audit(1752535774.084:1): state=initialized audit_enabled=0 res=1 Jul 14 23:29:35.665320 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 14 23:29:35.665326 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 14 23:29:35.665331 kernel: cpuidle: using governor menu Jul 14 23:29:35.665337 kernel: Simple Boot Flag at 0x36 set to 0x80 Jul 14 23:29:35.665342 kernel: ACPI: bus type PCI registered Jul 14 23:29:35.665348 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 14 23:29:35.665353 kernel: dca service started, version 1.12.1 Jul 14 23:29:35.665359 kernel: PCI: MMCONFIG for domain 0000 [bus 00-7f] at [mem 0xf0000000-0xf7ffffff] (base 0xf0000000) Jul 14 23:29:35.665364 kernel: PCI: MMCONFIG at [mem 0xf0000000-0xf7ffffff] reserved in E820 Jul 14 23:29:35.665371 kernel: PCI: Using configuration type 1 for base access Jul 14 23:29:35.665376 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 14 23:29:35.665382 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 14 23:29:35.665387 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 14 23:29:35.665393 kernel: ACPI: Added _OSI(Module Device) Jul 14 23:29:35.665398 kernel: ACPI: Added _OSI(Processor Device) Jul 14 23:29:35.665404 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 14 23:29:35.665409 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 14 23:29:35.665415 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 14 23:29:35.665421 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 14 23:29:35.665427 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 14 23:29:35.665433 kernel: ACPI: [Firmware Bug]: BIOS _OSI(Linux) query ignored Jul 14 23:29:35.665439 kernel: ACPI: Interpreter enabled Jul 14 23:29:35.665444 kernel: ACPI: PM: (supports S0 S1 S5) Jul 14 23:29:35.665450 kernel: ACPI: Using IOAPIC for interrupt routing Jul 14 23:29:35.665456 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 14 23:29:35.665461 kernel: ACPI: Enabled 4 GPEs in block 00 to 0F Jul 14 23:29:35.665467 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-7f]) Jul 14 23:29:35.665542 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 14 23:29:35.665593 kernel: acpi PNP0A03:00: _OSC: platform does not support [AER LTR] Jul 14 23:29:35.665639 kernel: acpi PNP0A03:00: _OSC: OS now controls [PCIeHotplug PME PCIeCapability] Jul 14 23:29:35.665647 kernel: PCI host bridge to bus 0000:00 Jul 14 23:29:35.665694 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 14 23:29:35.665735 kernel: pci_bus 0000:00: root bus resource [mem 0x000cc000-0x000dbfff window] Jul 14 23:29:35.665779 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 14 23:29:35.666869 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 14 23:29:35.666915 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xfeff window] Jul 14 23:29:35.666956 kernel: pci_bus 0000:00: root bus resource [bus 00-7f] Jul 14 23:29:35.667012 kernel: pci 0000:00:00.0: [8086:7190] type 00 class 0x060000 Jul 14 23:29:35.667064 kernel: pci 0000:00:01.0: [8086:7191] type 01 class 0x060400 Jul 14 23:29:35.667118 kernel: pci 0000:00:07.0: [8086:7110] type 00 class 0x060100 Jul 14 23:29:35.667170 kernel: pci 0000:00:07.1: [8086:7111] type 00 class 0x01018a Jul 14 23:29:35.667250 kernel: pci 0000:00:07.1: reg 0x20: [io 0x1060-0x106f] Jul 14 23:29:35.667329 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Jul 14 23:29:35.667376 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Jul 14 23:29:35.667422 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Jul 14 23:29:35.667468 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Jul 14 23:29:35.667525 kernel: pci 0000:00:07.3: [8086:7113] type 00 class 0x068000 Jul 14 23:29:35.667571 kernel: pci 0000:00:07.3: quirk: [io 0x1000-0x103f] claimed by PIIX4 ACPI Jul 14 23:29:35.667617 kernel: pci 0000:00:07.3: quirk: [io 0x1040-0x104f] claimed by PIIX4 SMB Jul 14 23:29:35.667667 kernel: pci 0000:00:07.7: [15ad:0740] type 00 class 0x088000 Jul 14 23:29:35.667714 kernel: pci 0000:00:07.7: reg 0x10: [io 0x1080-0x10bf] Jul 14 23:29:35.667759 kernel: pci 0000:00:07.7: reg 0x14: [mem 0xfebfe000-0xfebfffff 64bit] Jul 14 23:29:35.676122 kernel: pci 0000:00:0f.0: [15ad:0405] type 00 class 0x030000 Jul 14 23:29:35.676195 kernel: pci 0000:00:0f.0: reg 0x10: [io 0x1070-0x107f] Jul 14 23:29:35.676248 kernel: pci 0000:00:0f.0: reg 0x14: [mem 0xe8000000-0xefffffff pref] Jul 14 23:29:35.676298 kernel: pci 0000:00:0f.0: reg 0x18: [mem 0xfe000000-0xfe7fffff] Jul 14 23:29:35.676347 kernel: pci 0000:00:0f.0: reg 0x30: [mem 0x00000000-0x00007fff pref] Jul 14 23:29:35.676396 kernel: pci 0000:00:0f.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 14 23:29:35.676449 kernel: pci 0000:00:11.0: [15ad:0790] type 01 class 0x060401 Jul 14 23:29:35.676508 kernel: pci 0000:00:15.0: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.676558 kernel: pci 0000:00:15.0: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.676611 kernel: pci 0000:00:15.1: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.676664 kernel: pci 0000:00:15.1: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.676717 kernel: pci 0000:00:15.2: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.676767 kernel: pci 0000:00:15.2: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.676832 kernel: pci 0000:00:15.3: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.676883 kernel: pci 0000:00:15.3: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.676940 kernel: pci 0000:00:15.4: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.676990 kernel: pci 0000:00:15.4: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.677043 kernel: pci 0000:00:15.5: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.677093 kernel: pci 0000:00:15.5: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.677148 kernel: pci 0000:00:15.6: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.677205 kernel: pci 0000:00:15.6: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.677264 kernel: pci 0000:00:15.7: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.677313 kernel: pci 0000:00:15.7: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.677366 kernel: pci 0000:00:16.0: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.677415 kernel: pci 0000:00:16.0: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.677471 kernel: pci 0000:00:16.1: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.677521 kernel: pci 0000:00:16.1: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.677573 kernel: pci 0000:00:16.2: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.677622 kernel: pci 0000:00:16.2: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.677674 kernel: pci 0000:00:16.3: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.677724 kernel: pci 0000:00:16.3: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.677780 kernel: pci 0000:00:16.4: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.677838 kernel: pci 0000:00:16.4: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.677891 kernel: pci 0000:00:16.5: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.677940 kernel: pci 0000:00:16.5: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.677991 kernel: pci 0000:00:16.6: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.678038 kernel: pci 0000:00:16.6: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.678092 kernel: pci 0000:00:16.7: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.678141 kernel: pci 0000:00:16.7: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.678192 kernel: pci 0000:00:17.0: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.678240 kernel: pci 0000:00:17.0: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.678292 kernel: pci 0000:00:17.1: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.678341 kernel: pci 0000:00:17.1: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.678394 kernel: pci 0000:00:17.2: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.678441 kernel: pci 0000:00:17.2: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.678493 kernel: pci 0000:00:17.3: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.678541 kernel: pci 0000:00:17.3: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.678592 kernel: pci 0000:00:17.4: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.678642 kernel: pci 0000:00:17.4: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.678697 kernel: pci 0000:00:17.5: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.678764 kernel: pci 0000:00:17.5: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.678853 kernel: pci 0000:00:17.6: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.678904 kernel: pci 0000:00:17.6: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.678956 kernel: pci 0000:00:17.7: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.679005 kernel: pci 0000:00:17.7: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.679066 kernel: pci 0000:00:18.0: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.679119 kernel: pci 0000:00:18.0: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.679170 kernel: pci 0000:00:18.1: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.679219 kernel: pci 0000:00:18.1: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.679269 kernel: pci 0000:00:18.2: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.679318 kernel: pci 0000:00:18.2: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.679370 kernel: pci 0000:00:18.3: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.679422 kernel: pci 0000:00:18.3: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.679473 kernel: pci 0000:00:18.4: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.679522 kernel: pci 0000:00:18.4: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.679575 kernel: pci 0000:00:18.5: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.679623 kernel: pci 0000:00:18.5: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.679674 kernel: pci 0000:00:18.6: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.679724 kernel: pci 0000:00:18.6: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.679777 kernel: pci 0000:00:18.7: [15ad:07a0] type 01 class 0x060400 Jul 14 23:29:35.681934 kernel: pci 0000:00:18.7: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.681993 kernel: pci_bus 0000:01: extended config space not accessible Jul 14 23:29:35.682048 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 14 23:29:35.682099 kernel: pci_bus 0000:02: extended config space not accessible Jul 14 23:29:35.682108 kernel: acpiphp: Slot [32] registered Jul 14 23:29:35.682117 kernel: acpiphp: Slot [33] registered Jul 14 23:29:35.682123 kernel: acpiphp: Slot [34] registered Jul 14 23:29:35.682129 kernel: acpiphp: Slot [35] registered Jul 14 23:29:35.682135 kernel: acpiphp: Slot [36] registered Jul 14 23:29:35.682140 kernel: acpiphp: Slot [37] registered Jul 14 23:29:35.682146 kernel: acpiphp: Slot [38] registered Jul 14 23:29:35.682152 kernel: acpiphp: Slot [39] registered Jul 14 23:29:35.682157 kernel: acpiphp: Slot [40] registered Jul 14 23:29:35.682163 kernel: acpiphp: Slot [41] registered Jul 14 23:29:35.682170 kernel: acpiphp: Slot [42] registered Jul 14 23:29:35.682176 kernel: acpiphp: Slot [43] registered Jul 14 23:29:35.682181 kernel: acpiphp: Slot [44] registered Jul 14 23:29:35.682187 kernel: acpiphp: Slot [45] registered Jul 14 23:29:35.682193 kernel: acpiphp: Slot [46] registered Jul 14 23:29:35.682199 kernel: acpiphp: Slot [47] registered Jul 14 23:29:35.682204 kernel: acpiphp: Slot [48] registered Jul 14 23:29:35.682210 kernel: acpiphp: Slot [49] registered Jul 14 23:29:35.682216 kernel: acpiphp: Slot [50] registered Jul 14 23:29:35.682222 kernel: acpiphp: Slot [51] registered Jul 14 23:29:35.682229 kernel: acpiphp: Slot [52] registered Jul 14 23:29:35.682234 kernel: acpiphp: Slot [53] registered Jul 14 23:29:35.682240 kernel: acpiphp: Slot [54] registered Jul 14 23:29:35.682246 kernel: acpiphp: Slot [55] registered Jul 14 23:29:35.682252 kernel: acpiphp: Slot [56] registered Jul 14 23:29:35.682257 kernel: acpiphp: Slot [57] registered Jul 14 23:29:35.682263 kernel: acpiphp: Slot [58] registered Jul 14 23:29:35.682269 kernel: acpiphp: Slot [59] registered Jul 14 23:29:35.682275 kernel: acpiphp: Slot [60] registered Jul 14 23:29:35.682282 kernel: acpiphp: Slot [61] registered Jul 14 23:29:35.682287 kernel: acpiphp: Slot [62] registered Jul 14 23:29:35.682293 kernel: acpiphp: Slot [63] registered Jul 14 23:29:35.682342 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] (subtractive decode) Jul 14 23:29:35.682391 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 14 23:29:35.682438 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 14 23:29:35.682485 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 14 23:29:35.682531 kernel: pci 0000:00:11.0: bridge window [mem 0x000a0000-0x000bffff window] (subtractive decode) Jul 14 23:29:35.682580 kernel: pci 0000:00:11.0: bridge window [mem 0x000cc000-0x000dbfff window] (subtractive decode) Jul 14 23:29:35.682627 kernel: pci 0000:00:11.0: bridge window [mem 0xc0000000-0xfebfffff window] (subtractive decode) Jul 14 23:29:35.682674 kernel: pci 0000:00:11.0: bridge window [io 0x0000-0x0cf7 window] (subtractive decode) Jul 14 23:29:35.682720 kernel: pci 0000:00:11.0: bridge window [io 0x0d00-0xfeff window] (subtractive decode) Jul 14 23:29:35.682775 kernel: pci 0000:03:00.0: [15ad:07c0] type 00 class 0x010700 Jul 14 23:29:35.682859 kernel: pci 0000:03:00.0: reg 0x10: [io 0x4000-0x4007] Jul 14 23:29:35.682910 kernel: pci 0000:03:00.0: reg 0x14: [mem 0xfd5f8000-0xfd5fffff 64bit] Jul 14 23:29:35.682961 kernel: pci 0000:03:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 14 23:29:35.683010 kernel: pci 0000:03:00.0: PME# supported from D0 D3hot D3cold Jul 14 23:29:35.683058 kernel: pci 0000:03:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 14 23:29:35.683108 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 14 23:29:35.683155 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 14 23:29:35.683208 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 14 23:29:35.683257 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 14 23:29:35.683305 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 14 23:29:35.683354 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 14 23:29:35.683403 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 14 23:29:35.683453 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 14 23:29:35.683501 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 14 23:29:35.683549 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 14 23:29:35.683597 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 14 23:29:35.683646 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 14 23:29:35.683696 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 14 23:29:35.683745 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 14 23:29:35.683800 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 14 23:29:35.683860 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 14 23:29:35.683925 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 14 23:29:35.683979 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 14 23:29:35.684027 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 14 23:29:35.684075 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 14 23:29:35.684124 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 14 23:29:35.684172 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 14 23:29:35.684219 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 14 23:29:35.684268 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 14 23:29:35.684316 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 14 23:29:35.684366 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 14 23:29:35.684419 kernel: pci 0000:0b:00.0: [15ad:07b0] type 00 class 0x020000 Jul 14 23:29:35.684470 kernel: pci 0000:0b:00.0: reg 0x10: [mem 0xfd4fc000-0xfd4fcfff] Jul 14 23:29:35.684520 kernel: pci 0000:0b:00.0: reg 0x14: [mem 0xfd4fd000-0xfd4fdfff] Jul 14 23:29:35.684569 kernel: pci 0000:0b:00.0: reg 0x18: [mem 0xfd4fe000-0xfd4fffff] Jul 14 23:29:35.684618 kernel: pci 0000:0b:00.0: reg 0x1c: [io 0x5000-0x500f] Jul 14 23:29:35.684667 kernel: pci 0000:0b:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 14 23:29:35.684718 kernel: pci 0000:0b:00.0: supports D1 D2 Jul 14 23:29:35.684768 kernel: pci 0000:0b:00.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 14 23:29:35.684826 kernel: pci 0000:0b:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 14 23:29:35.684874 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 14 23:29:35.684922 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 14 23:29:35.684984 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 14 23:29:35.685043 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 14 23:29:35.685091 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 14 23:29:35.685142 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 14 23:29:35.685190 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 14 23:29:35.685238 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 14 23:29:35.685286 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 14 23:29:35.685332 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 14 23:29:35.685380 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 14 23:29:35.685429 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 14 23:29:35.685479 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 14 23:29:35.685526 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 14 23:29:35.685574 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 14 23:29:35.685622 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 14 23:29:35.685670 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 14 23:29:35.685718 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 14 23:29:35.685766 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 14 23:29:35.690608 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 14 23:29:35.690670 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 14 23:29:35.690721 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 14 23:29:35.690770 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 14 23:29:35.690837 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 14 23:29:35.690886 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 14 23:29:35.690933 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 14 23:29:35.690981 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 14 23:29:35.691028 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 14 23:29:35.691074 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 14 23:29:35.691123 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 14 23:29:35.691171 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 14 23:29:35.691218 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 14 23:29:35.691264 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 14 23:29:35.691321 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 14 23:29:35.691371 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 14 23:29:35.691418 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 14 23:29:35.691487 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 14 23:29:35.691534 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 14 23:29:35.691598 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 14 23:29:35.691656 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 14 23:29:35.691705 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 14 23:29:35.691753 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 14 23:29:35.691809 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 14 23:29:35.691857 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 14 23:29:35.691907 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 14 23:29:35.691953 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 14 23:29:35.691999 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 14 23:29:35.692045 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 14 23:29:35.692092 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 14 23:29:35.692138 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 14 23:29:35.692186 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 14 23:29:35.692233 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 14 23:29:35.692281 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 14 23:29:35.692349 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 14 23:29:35.692411 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 14 23:29:35.692458 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 14 23:29:35.692505 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 14 23:29:35.692552 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 14 23:29:35.692600 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 14 23:29:35.692646 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 14 23:29:35.692700 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 14 23:29:35.692766 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 14 23:29:35.692827 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 14 23:29:35.692877 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 14 23:29:35.692925 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 14 23:29:35.692972 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 14 23:29:35.693019 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 14 23:29:35.693070 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 14 23:29:35.693116 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 14 23:29:35.693446 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 14 23:29:35.693501 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 14 23:29:35.693567 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 14 23:29:35.693614 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 14 23:29:35.693663 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 14 23:29:35.693710 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 14 23:29:35.693760 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 14 23:29:35.693840 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 14 23:29:35.693889 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 14 23:29:35.693936 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 14 23:29:35.693944 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 9 Jul 14 23:29:35.693950 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 0 Jul 14 23:29:35.693955 kernel: ACPI: PCI: Interrupt link LNKB disabled Jul 14 23:29:35.693961 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 14 23:29:35.693967 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 10 Jul 14 23:29:35.693975 kernel: iommu: Default domain type: Translated Jul 14 23:29:35.693981 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 14 23:29:35.694028 kernel: pci 0000:00:0f.0: vgaarb: setting as boot VGA device Jul 14 23:29:35.694075 kernel: pci 0000:00:0f.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 14 23:29:35.694122 kernel: pci 0000:00:0f.0: vgaarb: bridge control possible Jul 14 23:29:35.694130 kernel: vgaarb: loaded Jul 14 23:29:35.694136 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 14 23:29:35.694142 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 14 23:29:35.694148 kernel: PTP clock support registered Jul 14 23:29:35.694155 kernel: PCI: Using ACPI for IRQ routing Jul 14 23:29:35.694161 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 14 23:29:35.694167 kernel: e820: reserve RAM buffer [mem 0x0009ec00-0x0009ffff] Jul 14 23:29:35.694172 kernel: e820: reserve RAM buffer [mem 0x7fee0000-0x7fffffff] Jul 14 23:29:35.694178 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 Jul 14 23:29:35.694184 kernel: hpet0: 16 comparators, 64-bit 14.318180 MHz counter Jul 14 23:29:35.694190 kernel: clocksource: Switched to clocksource tsc-early Jul 14 23:29:35.694196 kernel: VFS: Disk quotas dquot_6.6.0 Jul 14 23:29:35.694202 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 14 23:29:35.694209 kernel: pnp: PnP ACPI init Jul 14 23:29:35.694261 kernel: system 00:00: [io 0x1000-0x103f] has been reserved Jul 14 23:29:35.694306 kernel: system 00:00: [io 0x1040-0x104f] has been reserved Jul 14 23:29:35.694349 kernel: system 00:00: [io 0x0cf0-0x0cf1] has been reserved Jul 14 23:29:35.694407 kernel: system 00:04: [mem 0xfed00000-0xfed003ff] has been reserved Jul 14 23:29:35.694457 kernel: pnp 00:06: [dma 2] Jul 14 23:29:35.694503 kernel: system 00:07: [io 0xfce0-0xfcff] has been reserved Jul 14 23:29:35.694550 kernel: system 00:07: [mem 0xf0000000-0xf7ffffff] has been reserved Jul 14 23:29:35.694593 kernel: system 00:07: [mem 0xfe800000-0xfe9fffff] has been reserved Jul 14 23:29:35.694600 kernel: pnp: PnP ACPI: found 8 devices Jul 14 23:29:35.694607 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 14 23:29:35.694612 kernel: NET: Registered PF_INET protocol family Jul 14 23:29:35.694618 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 14 23:29:35.694624 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Jul 14 23:29:35.694631 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 14 23:29:35.694637 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Jul 14 23:29:35.694643 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Jul 14 23:29:35.694648 kernel: TCP: Hash tables configured (established 16384 bind 16384) Jul 14 23:29:35.694654 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 14 23:29:35.694660 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 14 23:29:35.694666 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 14 23:29:35.694672 kernel: NET: Registered PF_XDP protocol family Jul 14 23:29:35.694720 kernel: pci 0000:00:15.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 03] add_size 200000 add_align 100000 Jul 14 23:29:35.694771 kernel: pci 0000:00:15.3: bridge window [io 0x1000-0x0fff] to [bus 06] add_size 1000 Jul 14 23:29:35.694833 kernel: pci 0000:00:15.4: bridge window [io 0x1000-0x0fff] to [bus 07] add_size 1000 Jul 14 23:29:35.694895 kernel: pci 0000:00:15.5: bridge window [io 0x1000-0x0fff] to [bus 08] add_size 1000 Jul 14 23:29:35.694945 kernel: pci 0000:00:15.6: bridge window [io 0x1000-0x0fff] to [bus 09] add_size 1000 Jul 14 23:29:35.694993 kernel: pci 0000:00:15.7: bridge window [io 0x1000-0x0fff] to [bus 0a] add_size 1000 Jul 14 23:29:35.695041 kernel: pci 0000:00:16.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0b] add_size 200000 add_align 100000 Jul 14 23:29:35.695091 kernel: pci 0000:00:16.3: bridge window [io 0x1000-0x0fff] to [bus 0e] add_size 1000 Jul 14 23:29:35.695138 kernel: pci 0000:00:16.4: bridge window [io 0x1000-0x0fff] to [bus 0f] add_size 1000 Jul 14 23:29:35.695186 kernel: pci 0000:00:16.5: bridge window [io 0x1000-0x0fff] to [bus 10] add_size 1000 Jul 14 23:29:35.695231 kernel: pci 0000:00:16.6: bridge window [io 0x1000-0x0fff] to [bus 11] add_size 1000 Jul 14 23:29:35.695279 kernel: pci 0000:00:16.7: bridge window [io 0x1000-0x0fff] to [bus 12] add_size 1000 Jul 14 23:29:35.695326 kernel: pci 0000:00:17.3: bridge window [io 0x1000-0x0fff] to [bus 16] add_size 1000 Jul 14 23:29:35.695375 kernel: pci 0000:00:17.4: bridge window [io 0x1000-0x0fff] to [bus 17] add_size 1000 Jul 14 23:29:35.695422 kernel: pci 0000:00:17.5: bridge window [io 0x1000-0x0fff] to [bus 18] add_size 1000 Jul 14 23:29:35.695482 kernel: pci 0000:00:17.6: bridge window [io 0x1000-0x0fff] to [bus 19] add_size 1000 Jul 14 23:29:35.695547 kernel: pci 0000:00:17.7: bridge window [io 0x1000-0x0fff] to [bus 1a] add_size 1000 Jul 14 23:29:35.695596 kernel: pci 0000:00:18.2: bridge window [io 0x1000-0x0fff] to [bus 1d] add_size 1000 Jul 14 23:29:35.695647 kernel: pci 0000:00:18.3: bridge window [io 0x1000-0x0fff] to [bus 1e] add_size 1000 Jul 14 23:29:35.695694 kernel: pci 0000:00:18.4: bridge window [io 0x1000-0x0fff] to [bus 1f] add_size 1000 Jul 14 23:29:35.695742 kernel: pci 0000:00:18.5: bridge window [io 0x1000-0x0fff] to [bus 20] add_size 1000 Jul 14 23:29:35.695788 kernel: pci 0000:00:18.6: bridge window [io 0x1000-0x0fff] to [bus 21] add_size 1000 Jul 14 23:29:35.695854 kernel: pci 0000:00:18.7: bridge window [io 0x1000-0x0fff] to [bus 22] add_size 1000 Jul 14 23:29:35.695903 kernel: pci 0000:00:15.0: BAR 15: assigned [mem 0xc0000000-0xc01fffff 64bit pref] Jul 14 23:29:35.695952 kernel: pci 0000:00:16.0: BAR 15: assigned [mem 0xc0200000-0xc03fffff 64bit pref] Jul 14 23:29:35.695999 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.696046 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.696093 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.696140 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.696186 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.696271 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.696319 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.696367 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.696415 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.696462 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.696509 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.696556 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.696604 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.696651 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.696698 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.696746 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.696793 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.696872 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.696919 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.696965 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.697010 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.697057 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.697102 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.697151 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.697204 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.697291 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.697338 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.697383 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.697430 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.697475 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.697522 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.697571 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.697618 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.697665 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.697711 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.697758 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.697843 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.697940 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.697989 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.698036 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.698086 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.698134 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.698179 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.698226 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.698272 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.698319 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.698366 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.698412 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.698459 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.698508 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.698554 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.698630 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.698703 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.698751 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.698804 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.698852 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.698898 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.698959 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.699008 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.699293 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.699352 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.699609 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.699670 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.699721 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.699769 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.699826 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.700121 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.700181 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.700236 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.700285 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.700599 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.700655 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.700705 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.700753 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.700876 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.700925 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.700973 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.701023 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.701071 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.701118 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.701165 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.701211 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.701258 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 14 23:29:35.701304 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:29:35.701353 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 14 23:29:35.701401 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] Jul 14 23:29:35.701450 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 14 23:29:35.701495 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 14 23:29:35.701542 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 14 23:29:35.701592 kernel: pci 0000:03:00.0: BAR 6: assigned [mem 0xfd500000-0xfd50ffff pref] Jul 14 23:29:35.701640 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 14 23:29:35.701687 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 14 23:29:35.701734 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 14 23:29:35.701782 kernel: pci 0000:00:15.0: bridge window [mem 0xc0000000-0xc01fffff 64bit pref] Jul 14 23:29:35.701845 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 14 23:29:35.701893 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 14 23:29:35.701941 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 14 23:29:35.701988 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 14 23:29:35.702037 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 14 23:29:35.702093 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 14 23:29:35.702147 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 14 23:29:35.702195 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 14 23:29:35.702270 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 14 23:29:35.702551 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 14 23:29:35.702605 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 14 23:29:35.702655 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 14 23:29:35.703007 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 14 23:29:35.703061 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 14 23:29:35.703406 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 14 23:29:35.703469 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 14 23:29:35.703523 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 14 23:29:35.703572 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 14 23:29:35.703620 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 14 23:29:35.703667 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 14 23:29:35.703714 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 14 23:29:35.703762 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 14 23:29:35.703872 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 14 23:29:35.703924 kernel: pci 0000:0b:00.0: BAR 6: assigned [mem 0xfd400000-0xfd40ffff pref] Jul 14 23:29:35.703973 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 14 23:29:35.704022 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 14 23:29:35.704069 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 14 23:29:35.704116 kernel: pci 0000:00:16.0: bridge window [mem 0xc0200000-0xc03fffff 64bit pref] Jul 14 23:29:35.704164 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 14 23:29:35.704428 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 14 23:29:35.704481 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 14 23:29:35.704529 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 14 23:29:35.704577 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 14 23:29:35.704884 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 14 23:29:35.704950 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 14 23:29:35.705000 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 14 23:29:35.705065 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 14 23:29:35.705377 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 14 23:29:35.705434 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 14 23:29:35.705682 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 14 23:29:35.705735 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 14 23:29:35.706064 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 14 23:29:35.706124 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 14 23:29:35.706175 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 14 23:29:35.706266 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 14 23:29:35.706436 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 14 23:29:35.706488 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 14 23:29:35.706819 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 14 23:29:35.706881 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 14 23:29:35.706931 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 14 23:29:35.706978 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 14 23:29:35.707152 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 14 23:29:35.707443 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 14 23:29:35.707504 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 14 23:29:35.707553 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 14 23:29:35.707602 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 14 23:29:35.707649 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 14 23:29:35.707696 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 14 23:29:35.707744 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 14 23:29:35.707792 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 14 23:29:35.707848 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 14 23:29:35.707894 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 14 23:29:35.707940 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 14 23:29:35.708285 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 14 23:29:35.708343 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 14 23:29:35.708436 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 14 23:29:35.708509 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 14 23:29:35.708558 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 14 23:29:35.708606 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 14 23:29:35.708653 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 14 23:29:35.708702 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 14 23:29:35.708749 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 14 23:29:35.708812 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 14 23:29:35.708881 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 14 23:29:35.708943 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 14 23:29:35.708990 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 14 23:29:35.709037 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 14 23:29:35.709084 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 14 23:29:35.709141 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 14 23:29:35.709219 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 14 23:29:35.709292 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 14 23:29:35.709339 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 14 23:29:35.709389 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 14 23:29:35.709436 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 14 23:29:35.709609 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 14 23:29:35.709660 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 14 23:29:35.709709 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 14 23:29:35.710120 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 14 23:29:35.710172 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 14 23:29:35.710225 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 14 23:29:35.710273 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 14 23:29:35.710323 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 14 23:29:35.710371 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 14 23:29:35.710436 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 14 23:29:35.710494 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 14 23:29:35.710542 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 14 23:29:35.710590 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 14 23:29:35.710636 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 14 23:29:35.710826 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 14 23:29:35.711077 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 14 23:29:35.711132 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 14 23:29:35.711459 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 14 23:29:35.711517 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 14 23:29:35.711567 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 14 23:29:35.711614 kernel: pci_bus 0000:00: resource 4 [mem 0x000a0000-0x000bffff window] Jul 14 23:29:35.711765 kernel: pci_bus 0000:00: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 14 23:29:35.711819 kernel: pci_bus 0000:00: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 14 23:29:35.711862 kernel: pci_bus 0000:00: resource 7 [io 0x0000-0x0cf7 window] Jul 14 23:29:35.712180 kernel: pci_bus 0000:00: resource 8 [io 0x0d00-0xfeff window] Jul 14 23:29:35.712234 kernel: pci_bus 0000:02: resource 0 [io 0x2000-0x3fff] Jul 14 23:29:35.712280 kernel: pci_bus 0000:02: resource 1 [mem 0xfd600000-0xfdffffff] Jul 14 23:29:35.712325 kernel: pci_bus 0000:02: resource 2 [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 14 23:29:35.712369 kernel: pci_bus 0000:02: resource 4 [mem 0x000a0000-0x000bffff window] Jul 14 23:29:35.712412 kernel: pci_bus 0000:02: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 14 23:29:35.712455 kernel: pci_bus 0000:02: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 14 23:29:35.712499 kernel: pci_bus 0000:02: resource 7 [io 0x0000-0x0cf7 window] Jul 14 23:29:35.712558 kernel: pci_bus 0000:02: resource 8 [io 0x0d00-0xfeff window] Jul 14 23:29:35.712608 kernel: pci_bus 0000:03: resource 0 [io 0x4000-0x4fff] Jul 14 23:29:35.712653 kernel: pci_bus 0000:03: resource 1 [mem 0xfd500000-0xfd5fffff] Jul 14 23:29:35.712696 kernel: pci_bus 0000:03: resource 2 [mem 0xc0000000-0xc01fffff 64bit pref] Jul 14 23:29:35.712744 kernel: pci_bus 0000:04: resource 0 [io 0x8000-0x8fff] Jul 14 23:29:35.712788 kernel: pci_bus 0000:04: resource 1 [mem 0xfd100000-0xfd1fffff] Jul 14 23:29:35.712868 kernel: pci_bus 0000:04: resource 2 [mem 0xe7800000-0xe78fffff 64bit pref] Jul 14 23:29:35.712921 kernel: pci_bus 0000:05: resource 0 [io 0xc000-0xcfff] Jul 14 23:29:35.712965 kernel: pci_bus 0000:05: resource 1 [mem 0xfcd00000-0xfcdfffff] Jul 14 23:29:35.713008 kernel: pci_bus 0000:05: resource 2 [mem 0xe7400000-0xe74fffff 64bit pref] Jul 14 23:29:35.713199 kernel: pci_bus 0000:06: resource 1 [mem 0xfc900000-0xfc9fffff] Jul 14 23:29:35.713480 kernel: pci_bus 0000:06: resource 2 [mem 0xe7000000-0xe70fffff 64bit pref] Jul 14 23:29:35.713533 kernel: pci_bus 0000:07: resource 1 [mem 0xfc500000-0xfc5fffff] Jul 14 23:29:35.713579 kernel: pci_bus 0000:07: resource 2 [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 14 23:29:35.713660 kernel: pci_bus 0000:08: resource 1 [mem 0xfc100000-0xfc1fffff] Jul 14 23:29:35.713708 kernel: pci_bus 0000:08: resource 2 [mem 0xe6800000-0xe68fffff 64bit pref] Jul 14 23:29:35.713755 kernel: pci_bus 0000:09: resource 1 [mem 0xfbd00000-0xfbdfffff] Jul 14 23:29:35.713808 kernel: pci_bus 0000:09: resource 2 [mem 0xe6400000-0xe64fffff 64bit pref] Jul 14 23:29:35.713856 kernel: pci_bus 0000:0a: resource 1 [mem 0xfb900000-0xfb9fffff] Jul 14 23:29:35.713900 kernel: pci_bus 0000:0a: resource 2 [mem 0xe6000000-0xe60fffff 64bit pref] Jul 14 23:29:35.713954 kernel: pci_bus 0000:0b: resource 0 [io 0x5000-0x5fff] Jul 14 23:29:35.713999 kernel: pci_bus 0000:0b: resource 1 [mem 0xfd400000-0xfd4fffff] Jul 14 23:29:35.714043 kernel: pci_bus 0000:0b: resource 2 [mem 0xc0200000-0xc03fffff 64bit pref] Jul 14 23:29:35.714090 kernel: pci_bus 0000:0c: resource 0 [io 0x9000-0x9fff] Jul 14 23:29:35.714135 kernel: pci_bus 0000:0c: resource 1 [mem 0xfd000000-0xfd0fffff] Jul 14 23:29:35.714182 kernel: pci_bus 0000:0c: resource 2 [mem 0xe7700000-0xe77fffff 64bit pref] Jul 14 23:29:35.714250 kernel: pci_bus 0000:0d: resource 0 [io 0xd000-0xdfff] Jul 14 23:29:35.714299 kernel: pci_bus 0000:0d: resource 1 [mem 0xfcc00000-0xfccfffff] Jul 14 23:29:35.714345 kernel: pci_bus 0000:0d: resource 2 [mem 0xe7300000-0xe73fffff 64bit pref] Jul 14 23:29:35.714395 kernel: pci_bus 0000:0e: resource 1 [mem 0xfc800000-0xfc8fffff] Jul 14 23:29:35.714440 kernel: pci_bus 0000:0e: resource 2 [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 14 23:29:35.714488 kernel: pci_bus 0000:0f: resource 1 [mem 0xfc400000-0xfc4fffff] Jul 14 23:29:35.714536 kernel: pci_bus 0000:0f: resource 2 [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 14 23:29:35.714586 kernel: pci_bus 0000:10: resource 1 [mem 0xfc000000-0xfc0fffff] Jul 14 23:29:35.714631 kernel: pci_bus 0000:10: resource 2 [mem 0xe6700000-0xe67fffff 64bit pref] Jul 14 23:29:35.714691 kernel: pci_bus 0000:11: resource 1 [mem 0xfbc00000-0xfbcfffff] Jul 14 23:29:35.714749 kernel: pci_bus 0000:11: resource 2 [mem 0xe6300000-0xe63fffff 64bit pref] Jul 14 23:29:35.714805 kernel: pci_bus 0000:12: resource 1 [mem 0xfb800000-0xfb8fffff] Jul 14 23:29:35.714851 kernel: pci_bus 0000:12: resource 2 [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 14 23:29:35.714902 kernel: pci_bus 0000:13: resource 0 [io 0x6000-0x6fff] Jul 14 23:29:35.714947 kernel: pci_bus 0000:13: resource 1 [mem 0xfd300000-0xfd3fffff] Jul 14 23:29:35.714991 kernel: pci_bus 0000:13: resource 2 [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 14 23:29:35.715039 kernel: pci_bus 0000:14: resource 0 [io 0xa000-0xafff] Jul 14 23:29:35.715084 kernel: pci_bus 0000:14: resource 1 [mem 0xfcf00000-0xfcffffff] Jul 14 23:29:35.715129 kernel: pci_bus 0000:14: resource 2 [mem 0xe7600000-0xe76fffff 64bit pref] Jul 14 23:29:35.715179 kernel: pci_bus 0000:15: resource 0 [io 0xe000-0xefff] Jul 14 23:29:35.715223 kernel: pci_bus 0000:15: resource 1 [mem 0xfcb00000-0xfcbfffff] Jul 14 23:29:35.715268 kernel: pci_bus 0000:15: resource 2 [mem 0xe7200000-0xe72fffff 64bit pref] Jul 14 23:29:35.715338 kernel: pci_bus 0000:16: resource 1 [mem 0xfc700000-0xfc7fffff] Jul 14 23:29:35.715386 kernel: pci_bus 0000:16: resource 2 [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 14 23:29:35.715438 kernel: pci_bus 0000:17: resource 1 [mem 0xfc300000-0xfc3fffff] Jul 14 23:29:35.715482 kernel: pci_bus 0000:17: resource 2 [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 14 23:29:35.715533 kernel: pci_bus 0000:18: resource 1 [mem 0xfbf00000-0xfbffffff] Jul 14 23:29:35.715577 kernel: pci_bus 0000:18: resource 2 [mem 0xe6600000-0xe66fffff 64bit pref] Jul 14 23:29:35.715624 kernel: pci_bus 0000:19: resource 1 [mem 0xfbb00000-0xfbbfffff] Jul 14 23:29:35.715669 kernel: pci_bus 0000:19: resource 2 [mem 0xe6200000-0xe62fffff 64bit pref] Jul 14 23:29:35.715718 kernel: pci_bus 0000:1a: resource 1 [mem 0xfb700000-0xfb7fffff] Jul 14 23:29:35.715763 kernel: pci_bus 0000:1a: resource 2 [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 14 23:29:35.716077 kernel: pci_bus 0000:1b: resource 0 [io 0x7000-0x7fff] Jul 14 23:29:35.716128 kernel: pci_bus 0000:1b: resource 1 [mem 0xfd200000-0xfd2fffff] Jul 14 23:29:35.716406 kernel: pci_bus 0000:1b: resource 2 [mem 0xe7900000-0xe79fffff 64bit pref] Jul 14 23:29:35.716459 kernel: pci_bus 0000:1c: resource 0 [io 0xb000-0xbfff] Jul 14 23:29:35.716505 kernel: pci_bus 0000:1c: resource 1 [mem 0xfce00000-0xfcefffff] Jul 14 23:29:35.716549 kernel: pci_bus 0000:1c: resource 2 [mem 0xe7500000-0xe75fffff 64bit pref] Jul 14 23:29:35.716854 kernel: pci_bus 0000:1d: resource 1 [mem 0xfca00000-0xfcafffff] Jul 14 23:29:35.716912 kernel: pci_bus 0000:1d: resource 2 [mem 0xe7100000-0xe71fffff 64bit pref] Jul 14 23:29:35.717507 kernel: pci_bus 0000:1e: resource 1 [mem 0xfc600000-0xfc6fffff] Jul 14 23:29:35.717561 kernel: pci_bus 0000:1e: resource 2 [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 14 23:29:35.717612 kernel: pci_bus 0000:1f: resource 1 [mem 0xfc200000-0xfc2fffff] Jul 14 23:29:35.717919 kernel: pci_bus 0000:1f: resource 2 [mem 0xe6900000-0xe69fffff 64bit pref] Jul 14 23:29:35.717976 kernel: pci_bus 0000:20: resource 1 [mem 0xfbe00000-0xfbefffff] Jul 14 23:29:35.718307 kernel: pci_bus 0000:20: resource 2 [mem 0xe6500000-0xe65fffff 64bit pref] Jul 14 23:29:35.718362 kernel: pci_bus 0000:21: resource 1 [mem 0xfba00000-0xfbafffff] Jul 14 23:29:35.718409 kernel: pci_bus 0000:21: resource 2 [mem 0xe6100000-0xe61fffff 64bit pref] Jul 14 23:29:35.718471 kernel: pci_bus 0000:22: resource 1 [mem 0xfb600000-0xfb6fffff] Jul 14 23:29:35.718658 kernel: pci_bus 0000:22: resource 2 [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 14 23:29:35.718718 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 14 23:29:35.718728 kernel: PCI: CLS 32 bytes, default 64 Jul 14 23:29:35.718937 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Jul 14 23:29:35.718944 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 14 23:29:35.718951 kernel: clocksource: Switched to clocksource tsc Jul 14 23:29:35.718957 kernel: Initialise system trusted keyrings Jul 14 23:29:35.718963 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Jul 14 23:29:35.718970 kernel: Key type asymmetric registered Jul 14 23:29:35.718976 kernel: Asymmetric key parser 'x509' registered Jul 14 23:29:35.718984 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 14 23:29:35.718990 kernel: io scheduler mq-deadline registered Jul 14 23:29:35.718996 kernel: io scheduler kyber registered Jul 14 23:29:35.719002 kernel: io scheduler bfq registered Jul 14 23:29:35.719331 kernel: pcieport 0000:00:15.0: PME: Signaling with IRQ 24 Jul 14 23:29:35.719395 kernel: pcieport 0000:00:15.0: pciehp: Slot #160 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.719448 kernel: pcieport 0000:00:15.1: PME: Signaling with IRQ 25 Jul 14 23:29:35.719497 kernel: pcieport 0000:00:15.1: pciehp: Slot #161 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.719687 kernel: pcieport 0000:00:15.2: PME: Signaling with IRQ 26 Jul 14 23:29:35.719957 kernel: pcieport 0000:00:15.2: pciehp: Slot #162 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.720015 kernel: pcieport 0000:00:15.3: PME: Signaling with IRQ 27 Jul 14 23:29:35.720067 kernel: pcieport 0000:00:15.3: pciehp: Slot #163 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.720433 kernel: pcieport 0000:00:15.4: PME: Signaling with IRQ 28 Jul 14 23:29:35.720486 kernel: pcieport 0000:00:15.4: pciehp: Slot #164 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.720539 kernel: pcieport 0000:00:15.5: PME: Signaling with IRQ 29 Jul 14 23:29:35.720729 kernel: pcieport 0000:00:15.5: pciehp: Slot #165 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.721055 kernel: pcieport 0000:00:15.6: PME: Signaling with IRQ 30 Jul 14 23:29:35.721116 kernel: pcieport 0000:00:15.6: pciehp: Slot #166 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.721170 kernel: pcieport 0000:00:15.7: PME: Signaling with IRQ 31 Jul 14 23:29:35.721224 kernel: pcieport 0000:00:15.7: pciehp: Slot #167 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.721285 kernel: pcieport 0000:00:16.0: PME: Signaling with IRQ 32 Jul 14 23:29:35.721335 kernel: pcieport 0000:00:16.0: pciehp: Slot #192 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.721384 kernel: pcieport 0000:00:16.1: PME: Signaling with IRQ 33 Jul 14 23:29:35.721432 kernel: pcieport 0000:00:16.1: pciehp: Slot #193 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.721480 kernel: pcieport 0000:00:16.2: PME: Signaling with IRQ 34 Jul 14 23:29:35.721528 kernel: pcieport 0000:00:16.2: pciehp: Slot #194 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.721579 kernel: pcieport 0000:00:16.3: PME: Signaling with IRQ 35 Jul 14 23:29:35.721627 kernel: pcieport 0000:00:16.3: pciehp: Slot #195 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.721676 kernel: pcieport 0000:00:16.4: PME: Signaling with IRQ 36 Jul 14 23:29:35.721723 kernel: pcieport 0000:00:16.4: pciehp: Slot #196 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.721771 kernel: pcieport 0000:00:16.5: PME: Signaling with IRQ 37 Jul 14 23:29:35.721828 kernel: pcieport 0000:00:16.5: pciehp: Slot #197 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.721881 kernel: pcieport 0000:00:16.6: PME: Signaling with IRQ 38 Jul 14 23:29:35.721929 kernel: pcieport 0000:00:16.6: pciehp: Slot #198 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.721978 kernel: pcieport 0000:00:16.7: PME: Signaling with IRQ 39 Jul 14 23:29:35.722025 kernel: pcieport 0000:00:16.7: pciehp: Slot #199 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.722074 kernel: pcieport 0000:00:17.0: PME: Signaling with IRQ 40 Jul 14 23:29:35.722124 kernel: pcieport 0000:00:17.0: pciehp: Slot #224 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.722172 kernel: pcieport 0000:00:17.1: PME: Signaling with IRQ 41 Jul 14 23:29:35.722220 kernel: pcieport 0000:00:17.1: pciehp: Slot #225 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.722269 kernel: pcieport 0000:00:17.2: PME: Signaling with IRQ 42 Jul 14 23:29:35.722316 kernel: pcieport 0000:00:17.2: pciehp: Slot #226 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.722364 kernel: pcieport 0000:00:17.3: PME: Signaling with IRQ 43 Jul 14 23:29:35.722413 kernel: pcieport 0000:00:17.3: pciehp: Slot #227 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.722463 kernel: pcieport 0000:00:17.4: PME: Signaling with IRQ 44 Jul 14 23:29:35.722512 kernel: pcieport 0000:00:17.4: pciehp: Slot #228 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.722559 kernel: pcieport 0000:00:17.5: PME: Signaling with IRQ 45 Jul 14 23:29:35.722608 kernel: pcieport 0000:00:17.5: pciehp: Slot #229 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.722657 kernel: pcieport 0000:00:17.6: PME: Signaling with IRQ 46 Jul 14 23:29:35.722707 kernel: pcieport 0000:00:17.6: pciehp: Slot #230 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.722756 kernel: pcieport 0000:00:17.7: PME: Signaling with IRQ 47 Jul 14 23:29:35.722815 kernel: pcieport 0000:00:17.7: pciehp: Slot #231 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.722868 kernel: pcieport 0000:00:18.0: PME: Signaling with IRQ 48 Jul 14 23:29:35.722915 kernel: pcieport 0000:00:18.0: pciehp: Slot #256 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.722963 kernel: pcieport 0000:00:18.1: PME: Signaling with IRQ 49 Jul 14 23:29:35.723013 kernel: pcieport 0000:00:18.1: pciehp: Slot #257 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.723062 kernel: pcieport 0000:00:18.2: PME: Signaling with IRQ 50 Jul 14 23:29:35.723110 kernel: pcieport 0000:00:18.2: pciehp: Slot #258 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.723158 kernel: pcieport 0000:00:18.3: PME: Signaling with IRQ 51 Jul 14 23:29:35.723210 kernel: pcieport 0000:00:18.3: pciehp: Slot #259 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.723259 kernel: pcieport 0000:00:18.4: PME: Signaling with IRQ 52 Jul 14 23:29:35.723321 kernel: pcieport 0000:00:18.4: pciehp: Slot #260 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.723376 kernel: pcieport 0000:00:18.5: PME: Signaling with IRQ 53 Jul 14 23:29:35.723425 kernel: pcieport 0000:00:18.5: pciehp: Slot #261 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.723473 kernel: pcieport 0000:00:18.6: PME: Signaling with IRQ 54 Jul 14 23:29:35.723521 kernel: pcieport 0000:00:18.6: pciehp: Slot #262 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.723571 kernel: pcieport 0000:00:18.7: PME: Signaling with IRQ 55 Jul 14 23:29:35.723619 kernel: pcieport 0000:00:18.7: pciehp: Slot #263 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:29:35.723627 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 14 23:29:35.723634 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 14 23:29:35.723640 kernel: 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 14 23:29:35.723647 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBC,PNP0f13:MOUS] at 0x60,0x64 irq 1,12 Jul 14 23:29:35.723653 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 14 23:29:35.723662 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 14 23:29:35.723710 kernel: rtc_cmos 00:01: registered as rtc0 Jul 14 23:29:35.723756 kernel: rtc_cmos 00:01: setting system clock to 2025-07-14T23:29:35 UTC (1752535775) Jul 14 23:29:35.724063 kernel: rtc_cmos 00:01: alarms up to one month, y3k, 114 bytes nvram Jul 14 23:29:35.724075 kernel: intel_pstate: CPU model not supported Jul 14 23:29:35.724082 kernel: NET: Registered PF_INET6 protocol family Jul 14 23:29:35.724088 kernel: Segment Routing with IPv6 Jul 14 23:29:35.724095 kernel: In-situ OAM (IOAM) with IPv6 Jul 14 23:29:35.724101 kernel: NET: Registered PF_PACKET protocol family Jul 14 23:29:35.724109 kernel: Key type dns_resolver registered Jul 14 23:29:35.724115 kernel: IPI shorthand broadcast: enabled Jul 14 23:29:35.724122 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 14 23:29:35.724128 kernel: sched_clock: Marking stable (855478147, 225529023)->(1143631886, -62624716) Jul 14 23:29:35.724135 kernel: registered taskstats version 1 Jul 14 23:29:35.724141 kernel: Loading compiled-in X.509 certificates Jul 14 23:29:35.724147 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.187-flatcar: 14a6940dcbc00bab0c83ae71c4abeb315720716d' Jul 14 23:29:35.724153 kernel: Key type .fscrypt registered Jul 14 23:29:35.724160 kernel: Key type fscrypt-provisioning registered Jul 14 23:29:35.724167 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 14 23:29:35.724173 kernel: ima: Allocated hash algorithm: sha1 Jul 14 23:29:35.724179 kernel: ima: No architecture policies found Jul 14 23:29:35.724185 kernel: clk: Disabling unused clocks Jul 14 23:29:35.724192 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 14 23:29:35.724198 kernel: Write protecting the kernel read-only data: 28672k Jul 14 23:29:35.724204 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 14 23:29:35.724614 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 14 23:29:35.724623 kernel: Run /init as init process Jul 14 23:29:35.724630 kernel: with arguments: Jul 14 23:29:35.724636 kernel: /init Jul 14 23:29:35.724642 kernel: with environment: Jul 14 23:29:35.724648 kernel: HOME=/ Jul 14 23:29:35.724654 kernel: TERM=linux Jul 14 23:29:35.724660 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 14 23:29:35.724668 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 23:29:35.724676 systemd[1]: Detected virtualization vmware. Jul 14 23:29:35.724684 systemd[1]: Detected architecture x86-64. Jul 14 23:29:35.724690 systemd[1]: Running in initrd. Jul 14 23:29:35.724696 systemd[1]: No hostname configured, using default hostname. Jul 14 23:29:35.724702 systemd[1]: Hostname set to . Jul 14 23:29:35.724709 systemd[1]: Initializing machine ID from random generator. Jul 14 23:29:35.724715 systemd[1]: Queued start job for default target initrd.target. Jul 14 23:29:35.724721 systemd[1]: Started systemd-ask-password-console.path. Jul 14 23:29:35.724727 systemd[1]: Reached target cryptsetup.target. Jul 14 23:29:35.724734 systemd[1]: Reached target paths.target. Jul 14 23:29:35.724740 systemd[1]: Reached target slices.target. Jul 14 23:29:35.724746 systemd[1]: Reached target swap.target. Jul 14 23:29:35.724755 systemd[1]: Reached target timers.target. Jul 14 23:29:35.724766 systemd[1]: Listening on iscsid.socket. Jul 14 23:29:35.724775 systemd[1]: Listening on iscsiuio.socket. Jul 14 23:29:35.724783 systemd[1]: Listening on systemd-journald-audit.socket. Jul 14 23:29:35.724801 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 14 23:29:35.724832 systemd[1]: Listening on systemd-journald.socket. Jul 14 23:29:35.724842 systemd[1]: Listening on systemd-networkd.socket. Jul 14 23:29:35.724852 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 23:29:35.724861 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 23:29:35.725173 systemd[1]: Reached target sockets.target. Jul 14 23:29:35.725183 systemd[1]: Starting kmod-static-nodes.service... Jul 14 23:29:35.725190 systemd[1]: Finished network-cleanup.service. Jul 14 23:29:35.725196 systemd[1]: Starting systemd-fsck-usr.service... Jul 14 23:29:35.725205 systemd[1]: Starting systemd-journald.service... Jul 14 23:29:35.725212 systemd[1]: Starting systemd-modules-load.service... Jul 14 23:29:35.725220 systemd[1]: Starting systemd-resolved.service... Jul 14 23:29:35.725226 systemd[1]: Starting systemd-vconsole-setup.service... Jul 14 23:29:35.725232 systemd[1]: Finished kmod-static-nodes.service. Jul 14 23:29:35.725239 systemd[1]: Finished systemd-fsck-usr.service. Jul 14 23:29:35.725245 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 14 23:29:35.725252 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 14 23:29:35.725258 kernel: audit: type=1130 audit(1752535775.656:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.725266 systemd[1]: Finished systemd-vconsole-setup.service. Jul 14 23:29:35.725273 systemd[1]: Starting dracut-cmdline-ask.service... Jul 14 23:29:35.725279 kernel: audit: type=1130 audit(1752535775.660:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.725286 systemd[1]: Finished dracut-cmdline-ask.service. Jul 14 23:29:35.725297 systemd[1]: Starting dracut-cmdline.service... Jul 14 23:29:35.725307 kernel: audit: type=1130 audit(1752535775.671:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.725315 systemd[1]: Started systemd-resolved.service. Jul 14 23:29:35.725321 systemd[1]: Reached target nss-lookup.target. Jul 14 23:29:35.725330 kernel: audit: type=1130 audit(1752535775.686:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.725337 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 14 23:29:35.725343 kernel: Bridge firewalling registered Jul 14 23:29:35.725353 systemd-journald[216]: Journal started Jul 14 23:29:35.725388 systemd-journald[216]: Runtime Journal (/run/log/journal/56fcb7b41c844f95ae6ab93a952bbb98) is 4.8M, max 38.8M, 34.0M free. Jul 14 23:29:35.728938 systemd[1]: Started systemd-journald.service. Jul 14 23:29:35.728954 kernel: audit: type=1130 audit(1752535775.725:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.728963 kernel: SCSI subsystem initialized Jul 14 23:29:35.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.657576 systemd-modules-load[217]: Inserted module 'overlay' Jul 14 23:29:35.680274 systemd-resolved[218]: Positive Trust Anchors: Jul 14 23:29:35.680279 systemd-resolved[218]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 23:29:35.680299 systemd-resolved[218]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 23:29:35.686049 systemd-resolved[218]: Defaulting to hostname 'linux'. Jul 14 23:29:35.709489 systemd-modules-load[217]: Inserted module 'br_netfilter' Jul 14 23:29:35.735066 dracut-cmdline[233]: dracut-dracut-053 Jul 14 23:29:35.735066 dracut-cmdline[233]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Jul 14 23:29:35.735066 dracut-cmdline[233]: BEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=d9618a329f89744ce954b0fa1b02ce8164745af7389f9de9c3421ad2087e0dba Jul 14 23:29:35.739149 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 14 23:29:35.739166 kernel: device-mapper: uevent: version 1.0.3 Jul 14 23:29:35.740183 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 14 23:29:35.744343 kernel: Loading iSCSI transport class v2.0-870. Jul 14 23:29:35.743399 systemd-modules-load[217]: Inserted module 'dm_multipath' Jul 14 23:29:35.743750 systemd[1]: Finished systemd-modules-load.service. Jul 14 23:29:35.744259 systemd[1]: Starting systemd-sysctl.service... Jul 14 23:29:35.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.749105 kernel: audit: type=1130 audit(1752535775.742:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.752894 systemd[1]: Finished systemd-sysctl.service. Jul 14 23:29:35.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.755838 kernel: audit: type=1130 audit(1752535775.751:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.759806 kernel: iscsi: registered transport (tcp) Jul 14 23:29:35.777075 kernel: iscsi: registered transport (qla4xxx) Jul 14 23:29:35.777092 kernel: QLogic iSCSI HBA Driver Jul 14 23:29:35.793092 systemd[1]: Finished dracut-cmdline.service. Jul 14 23:29:35.793729 systemd[1]: Starting dracut-pre-udev.service... Jul 14 23:29:35.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.796973 kernel: audit: type=1130 audit(1752535775.791:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:35.831813 kernel: raid6: avx2x4 gen() 47189 MB/s Jul 14 23:29:35.847809 kernel: raid6: avx2x4 xor() 21717 MB/s Jul 14 23:29:35.864837 kernel: raid6: avx2x2 gen() 53641 MB/s Jul 14 23:29:35.881805 kernel: raid6: avx2x2 xor() 32142 MB/s Jul 14 23:29:35.898815 kernel: raid6: avx2x1 gen() 44055 MB/s Jul 14 23:29:35.915806 kernel: raid6: avx2x1 xor() 27832 MB/s Jul 14 23:29:35.932806 kernel: raid6: sse2x4 gen() 20767 MB/s Jul 14 23:29:35.949807 kernel: raid6: sse2x4 xor() 11696 MB/s Jul 14 23:29:35.966806 kernel: raid6: sse2x2 gen() 21416 MB/s Jul 14 23:29:35.983823 kernel: raid6: sse2x2 xor() 12336 MB/s Jul 14 23:29:36.000826 kernel: raid6: sse2x1 gen() 17854 MB/s Jul 14 23:29:36.018030 kernel: raid6: sse2x1 xor() 8838 MB/s Jul 14 23:29:36.018070 kernel: raid6: using algorithm avx2x2 gen() 53641 MB/s Jul 14 23:29:36.018078 kernel: raid6: .... xor() 32142 MB/s, rmw enabled Jul 14 23:29:36.019220 kernel: raid6: using avx2x2 recovery algorithm Jul 14 23:29:36.027814 kernel: xor: automatically using best checksumming function avx Jul 14 23:29:36.090814 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 14 23:29:36.095056 systemd[1]: Finished dracut-pre-udev.service. Jul 14 23:29:36.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:36.095718 systemd[1]: Starting systemd-udevd.service... Jul 14 23:29:36.093000 audit: BPF prog-id=7 op=LOAD Jul 14 23:29:36.093000 audit: BPF prog-id=8 op=LOAD Jul 14 23:29:36.102812 kernel: audit: type=1130 audit(1752535776.093:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:36.106051 systemd-udevd[416]: Using default interface naming scheme 'v252'. Jul 14 23:29:36.108782 systemd[1]: Started systemd-udevd.service. Jul 14 23:29:36.109360 systemd[1]: Starting dracut-pre-trigger.service... Jul 14 23:29:36.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:36.117393 dracut-pre-trigger[421]: rd.md=0: removing MD RAID activation Jul 14 23:29:36.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:36.133729 systemd[1]: Finished dracut-pre-trigger.service. Jul 14 23:29:36.134264 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 23:29:36.202411 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 23:29:36.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:36.274013 kernel: VMware PVSCSI driver - version 1.0.7.0-k Jul 14 23:29:36.274047 kernel: vmw_pvscsi: using 64bit dma Jul 14 23:29:36.275507 kernel: vmw_pvscsi: max_id: 16 Jul 14 23:29:36.275530 kernel: vmw_pvscsi: setting ring_pages to 8 Jul 14 23:29:36.276876 kernel: libata version 3.00 loaded. Jul 14 23:29:36.285807 kernel: vmw_pvscsi: enabling reqCallThreshold Jul 14 23:29:36.285831 kernel: vmw_pvscsi: driver-based request coalescing enabled Jul 14 23:29:36.285840 kernel: vmw_pvscsi: using MSI-X Jul 14 23:29:36.290148 kernel: scsi host0: VMware PVSCSI storage adapter rev 2, req/cmp/msg rings: 8/8/1 pages, cmd_per_lun=254 Jul 14 23:29:36.290250 kernel: vmw_pvscsi 0000:03:00.0: VMware PVSCSI rev 2 host #0 Jul 14 23:29:36.292608 kernel: cryptd: max_cpu_qlen set to 1000 Jul 14 23:29:36.292618 kernel: ata_piix 0000:00:07.1: version 2.13 Jul 14 23:29:36.298194 kernel: scsi 0:0:0:0: Direct-Access VMware Virtual disk 2.0 PQ: 0 ANSI: 6 Jul 14 23:29:36.298271 kernel: scsi host1: ata_piix Jul 14 23:29:36.298335 kernel: scsi host2: ata_piix Jul 14 23:29:36.298396 kernel: ata1: PATA max UDMA/33 cmd 0x1f0 ctl 0x3f6 bmdma 0x1060 irq 14 Jul 14 23:29:36.298404 kernel: ata2: PATA max UDMA/33 cmd 0x170 ctl 0x376 bmdma 0x1068 irq 15 Jul 14 23:29:36.299970 kernel: VMware vmxnet3 virtual NIC driver - version 1.6.0.0-k-NAPI Jul 14 23:29:36.299989 kernel: vmxnet3 0000:0b:00.0: # of Tx queues : 2, # of Rx queues : 2 Jul 14 23:29:36.304567 kernel: AVX2 version of gcm_enc/dec engaged. Jul 14 23:29:36.304578 kernel: AES CTR mode by8 optimization enabled Jul 14 23:29:36.304585 kernel: vmxnet3 0000:0b:00.0 eth0: NIC Link is Up 10000 Mbps Jul 14 23:29:36.462813 kernel: ata2.00: ATAPI: VMware Virtual IDE CDROM Drive, 00000001, max UDMA/33 Jul 14 23:29:36.468810 kernel: scsi 2:0:0:0: CD-ROM NECVMWar VMware IDE CDR10 1.00 PQ: 0 ANSI: 5 Jul 14 23:29:36.474810 kernel: vmxnet3 0000:0b:00.0 ens192: renamed from eth0 Jul 14 23:29:36.479063 kernel: sd 0:0:0:0: [sda] 17805312 512-byte logical blocks: (9.12 GB/8.49 GiB) Jul 14 23:29:36.487031 kernel: sd 0:0:0:0: [sda] Write Protect is off Jul 14 23:29:36.487108 kernel: sd 0:0:0:0: [sda] Mode Sense: 31 00 00 00 Jul 14 23:29:36.487173 kernel: sd 0:0:0:0: [sda] Cache data unavailable Jul 14 23:29:36.487250 kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through Jul 14 23:29:36.487318 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 14 23:29:36.487327 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Jul 14 23:29:36.509440 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 1x/1x writer dvd-ram cd/rw xa/form2 cdda tray Jul 14 23:29:36.534888 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 14 23:29:36.534901 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (466) Jul 14 23:29:36.534910 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 14 23:29:36.514209 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 14 23:29:36.518723 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 14 23:29:36.520340 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 14 23:29:36.520457 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 14 23:29:36.521077 systemd[1]: Starting disk-uuid.service... Jul 14 23:29:36.540735 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 23:29:36.544829 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 14 23:29:36.549816 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 14 23:29:37.551846 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 14 23:29:37.551884 disk-uuid[547]: The operation has completed successfully. Jul 14 23:29:37.588112 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 14 23:29:37.588412 systemd[1]: Finished disk-uuid.service. Jul 14 23:29:37.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.589217 systemd[1]: Starting verity-setup.service... Jul 14 23:29:37.601836 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Jul 14 23:29:37.658307 systemd[1]: Found device dev-mapper-usr.device. Jul 14 23:29:37.659474 systemd[1]: Mounting sysusr-usr.mount... Jul 14 23:29:37.660911 systemd[1]: Finished verity-setup.service. Jul 14 23:29:37.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.716816 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 14 23:29:37.716934 systemd[1]: Mounted sysusr-usr.mount. Jul 14 23:29:37.717531 systemd[1]: Starting afterburn-network-kargs.service... Jul 14 23:29:37.718019 systemd[1]: Starting ignition-setup.service... Jul 14 23:29:37.734953 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 14 23:29:37.734998 kernel: BTRFS info (device sda6): using free space tree Jul 14 23:29:37.735008 kernel: BTRFS info (device sda6): has skinny extents Jul 14 23:29:37.739808 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 14 23:29:37.745813 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 14 23:29:37.751423 systemd[1]: Finished ignition-setup.service. Jul 14 23:29:37.752026 systemd[1]: Starting ignition-fetch-offline.service... Jul 14 23:29:37.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.798786 systemd[1]: Finished afterburn-network-kargs.service. Jul 14 23:29:37.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.799453 systemd[1]: Starting parse-ip-for-networkd.service... Jul 14 23:29:37.852314 systemd[1]: Finished parse-ip-for-networkd.service. Jul 14 23:29:37.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.851000 audit: BPF prog-id=9 op=LOAD Jul 14 23:29:37.853249 systemd[1]: Starting systemd-networkd.service... Jul 14 23:29:37.867548 systemd-networkd[731]: lo: Link UP Jul 14 23:29:37.867554 systemd-networkd[731]: lo: Gained carrier Jul 14 23:29:37.867878 systemd-networkd[731]: Enumeration completed Jul 14 23:29:37.868088 systemd-networkd[731]: ens192: Configuring with /etc/systemd/network/10-dracut-cmdline-99.network. Jul 14 23:29:37.872138 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 14 23:29:37.872262 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 14 23:29:37.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.868296 systemd[1]: Started systemd-networkd.service. Jul 14 23:29:37.868443 systemd[1]: Reached target network.target. Jul 14 23:29:37.868988 systemd[1]: Starting iscsiuio.service... Jul 14 23:29:37.870673 systemd-networkd[731]: ens192: Link UP Jul 14 23:29:37.870676 systemd-networkd[731]: ens192: Gained carrier Jul 14 23:29:37.874178 systemd[1]: Started iscsiuio.service. Jul 14 23:29:37.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.874937 systemd[1]: Starting iscsid.service... Jul 14 23:29:37.877924 iscsid[736]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 14 23:29:37.877924 iscsid[736]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 14 23:29:37.877924 iscsid[736]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 14 23:29:37.877924 iscsid[736]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 14 23:29:37.877924 iscsid[736]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 14 23:29:37.877924 iscsid[736]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 14 23:29:37.879718 systemd[1]: Started iscsid.service. Jul 14 23:29:37.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.881115 systemd[1]: Starting dracut-initqueue.service... Jul 14 23:29:37.888283 systemd[1]: Finished dracut-initqueue.service. Jul 14 23:29:37.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.888652 systemd[1]: Reached target remote-fs-pre.target. Jul 14 23:29:37.888880 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 23:29:37.889136 systemd[1]: Reached target remote-fs.target. Jul 14 23:29:37.889810 systemd[1]: Starting dracut-pre-mount.service... Jul 14 23:29:37.894276 ignition[603]: Ignition 2.14.0 Jul 14 23:29:37.894285 ignition[603]: Stage: fetch-offline Jul 14 23:29:37.894317 ignition[603]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:29:37.894332 ignition[603]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:29:37.895992 systemd[1]: Finished dracut-pre-mount.service. Jul 14 23:29:37.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.897231 ignition[603]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:29:37.897309 ignition[603]: parsed url from cmdline: "" Jul 14 23:29:37.897312 ignition[603]: no config URL provided Jul 14 23:29:37.897315 ignition[603]: reading system config file "/usr/lib/ignition/user.ign" Jul 14 23:29:37.897320 ignition[603]: no config at "/usr/lib/ignition/user.ign" Jul 14 23:29:37.903505 ignition[603]: config successfully fetched Jul 14 23:29:37.903536 ignition[603]: parsing config with SHA512: d1fb839da93ae19c88f1285b1a089399c16b2c3a90d0a389beaff436c50d5478b4717eab686ce397bb2d73038e0810eceec790d1bd37bb5bbde8259ca4a2c1f5 Jul 14 23:29:37.909343 unknown[603]: fetched base config from "system" Jul 14 23:29:37.909351 unknown[603]: fetched user config from "vmware" Jul 14 23:29:37.909691 ignition[603]: fetch-offline: fetch-offline passed Jul 14 23:29:37.909731 ignition[603]: Ignition finished successfully Jul 14 23:29:37.910456 systemd[1]: Finished ignition-fetch-offline.service. Jul 14 23:29:37.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.910781 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 14 23:29:37.911454 systemd[1]: Starting ignition-kargs.service... Jul 14 23:29:37.916859 ignition[751]: Ignition 2.14.0 Jul 14 23:29:37.917132 ignition[751]: Stage: kargs Jul 14 23:29:37.917315 ignition[751]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:29:37.917474 ignition[751]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:29:37.918823 ignition[751]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:29:37.920529 ignition[751]: kargs: kargs passed Jul 14 23:29:37.920577 ignition[751]: Ignition finished successfully Jul 14 23:29:37.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.921568 systemd[1]: Finished ignition-kargs.service. Jul 14 23:29:37.922221 systemd[1]: Starting ignition-disks.service... Jul 14 23:29:37.926883 ignition[757]: Ignition 2.14.0 Jul 14 23:29:37.927146 ignition[757]: Stage: disks Jul 14 23:29:37.927333 ignition[757]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:29:37.927487 ignition[757]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:29:37.928805 ignition[757]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:29:37.930391 ignition[757]: disks: disks passed Jul 14 23:29:37.930433 ignition[757]: Ignition finished successfully Jul 14 23:29:37.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.931204 systemd[1]: Finished ignition-disks.service. Jul 14 23:29:37.931367 systemd[1]: Reached target initrd-root-device.target. Jul 14 23:29:37.931460 systemd[1]: Reached target local-fs-pre.target. Jul 14 23:29:37.931547 systemd[1]: Reached target local-fs.target. Jul 14 23:29:37.931629 systemd[1]: Reached target sysinit.target. Jul 14 23:29:37.931710 systemd[1]: Reached target basic.target. Jul 14 23:29:37.932308 systemd[1]: Starting systemd-fsck-root.service... Jul 14 23:29:37.943222 systemd-fsck[765]: ROOT: clean, 619/1628000 files, 124060/1617920 blocks Jul 14 23:29:37.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:37.944704 systemd[1]: Finished systemd-fsck-root.service. Jul 14 23:29:37.945289 systemd[1]: Mounting sysroot.mount... Jul 14 23:29:37.953420 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 14 23:29:37.953168 systemd[1]: Mounted sysroot.mount. Jul 14 23:29:37.953299 systemd[1]: Reached target initrd-root-fs.target. Jul 14 23:29:37.954429 systemd[1]: Mounting sysroot-usr.mount... Jul 14 23:29:37.954777 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 14 23:29:37.955195 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 14 23:29:37.955217 systemd[1]: Reached target ignition-diskful.target. Jul 14 23:29:37.956308 systemd[1]: Mounted sysroot-usr.mount. Jul 14 23:29:37.957009 systemd[1]: Starting initrd-setup-root.service... Jul 14 23:29:37.960218 initrd-setup-root[775]: cut: /sysroot/etc/passwd: No such file or directory Jul 14 23:29:37.963759 initrd-setup-root[783]: cut: /sysroot/etc/group: No such file or directory Jul 14 23:29:37.966040 initrd-setup-root[791]: cut: /sysroot/etc/shadow: No such file or directory Jul 14 23:29:37.967980 initrd-setup-root[799]: cut: /sysroot/etc/gshadow: No such file or directory Jul 14 23:29:38.002166 systemd[1]: Finished initrd-setup-root.service. Jul 14 23:29:38.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:38.002896 systemd[1]: Starting ignition-mount.service... Jul 14 23:29:38.003373 systemd[1]: Starting sysroot-boot.service... Jul 14 23:29:38.007755 bash[816]: umount: /sysroot/usr/share/oem: not mounted. Jul 14 23:29:38.013472 ignition[817]: INFO : Ignition 2.14.0 Jul 14 23:29:38.013472 ignition[817]: INFO : Stage: mount Jul 14 23:29:38.013825 ignition[817]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:29:38.013825 ignition[817]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:29:38.014867 ignition[817]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:29:38.016740 ignition[817]: INFO : mount: mount passed Jul 14 23:29:38.016740 ignition[817]: INFO : Ignition finished successfully Jul 14 23:29:38.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:38.017227 systemd[1]: Finished ignition-mount.service. Jul 14 23:29:38.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:38.022907 systemd[1]: Finished sysroot-boot.service. Jul 14 23:29:38.688196 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 14 23:29:38.980820 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (825) Jul 14 23:29:38.995282 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 14 23:29:38.995314 kernel: BTRFS info (device sda6): using free space tree Jul 14 23:29:38.995322 kernel: BTRFS info (device sda6): has skinny extents Jul 14 23:29:39.068810 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 14 23:29:39.211282 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 14 23:29:39.211881 systemd[1]: Starting ignition-files.service... Jul 14 23:29:39.221207 ignition[845]: INFO : Ignition 2.14.0 Jul 14 23:29:39.221467 ignition[845]: INFO : Stage: files Jul 14 23:29:39.221642 ignition[845]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:29:39.221852 ignition[845]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:29:39.223378 ignition[845]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:29:39.235861 ignition[845]: DEBUG : files: compiled without relabeling support, skipping Jul 14 23:29:39.247677 ignition[845]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 14 23:29:39.247938 ignition[845]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 14 23:29:39.275488 ignition[845]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 14 23:29:39.275876 ignition[845]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 14 23:29:39.279553 unknown[845]: wrote ssh authorized keys file for user: core Jul 14 23:29:39.279793 ignition[845]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 14 23:29:39.285319 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Jul 14 23:29:39.285571 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz: attempt #1 Jul 14 23:29:39.330718 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 14 23:29:39.482152 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Jul 14 23:29:39.482401 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 14 23:29:39.482563 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 14 23:29:39.482563 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 14 23:29:39.482563 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 14 23:29:39.482563 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 23:29:39.487494 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 23:29:39.487661 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 23:29:39.487661 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 23:29:39.487994 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 23:29:39.487994 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 23:29:39.487994 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 14 23:29:39.487994 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 14 23:29:39.488702 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 14 23:29:39.488702 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Jul 14 23:29:39.492158 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem849169765" Jul 14 23:29:39.492387 ignition[845]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem849169765": device or resource busy Jul 14 23:29:39.492591 ignition[845]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem849169765", trying btrfs: device or resource busy Jul 14 23:29:39.492813 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem849169765" Jul 14 23:29:39.493057 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem849169765" Jul 14 23:29:39.493703 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem849169765" Jul 14 23:29:39.493923 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem849169765" Jul 14 23:29:39.495020 systemd[1]: mnt-oem849169765.mount: Deactivated successfully. Jul 14 23:29:39.495371 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 14 23:29:39.495575 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 14 23:29:39.495840 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-x86-64.raw: attempt #1 Jul 14 23:29:39.579248 systemd-networkd[731]: ens192: Gained IPv6LL Jul 14 23:29:40.162451 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET result: OK Jul 14 23:29:40.345025 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 14 23:29:40.345428 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 14 23:29:40.345428 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 14 23:29:40.345428 ignition[845]: INFO : files: op(10): [started] processing unit "vmtoolsd.service" Jul 14 23:29:40.345428 ignition[845]: INFO : files: op(10): [finished] processing unit "vmtoolsd.service" Jul 14 23:29:40.345428 ignition[845]: INFO : files: op(11): [started] processing unit "prepare-helm.service" Jul 14 23:29:40.345428 ignition[845]: INFO : files: op(11): op(12): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 23:29:40.345428 ignition[845]: INFO : files: op(11): op(12): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 23:29:40.345428 ignition[845]: INFO : files: op(11): [finished] processing unit "prepare-helm.service" Jul 14 23:29:40.345428 ignition[845]: INFO : files: op(13): [started] processing unit "coreos-metadata.service" Jul 14 23:29:40.345428 ignition[845]: INFO : files: op(13): op(14): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 23:29:40.345428 ignition[845]: INFO : files: op(13): op(14): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 23:29:40.345428 ignition[845]: INFO : files: op(13): [finished] processing unit "coreos-metadata.service" Jul 14 23:29:40.345428 ignition[845]: INFO : files: op(15): [started] setting preset to enabled for "prepare-helm.service" Jul 14 23:29:40.347566 ignition[845]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-helm.service" Jul 14 23:29:40.347566 ignition[845]: INFO : files: op(16): [started] setting preset to disabled for "coreos-metadata.service" Jul 14 23:29:40.347566 ignition[845]: INFO : files: op(16): op(17): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 23:29:40.392157 ignition[845]: INFO : files: op(16): op(17): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 23:29:40.392391 ignition[845]: INFO : files: op(16): [finished] setting preset to disabled for "coreos-metadata.service" Jul 14 23:29:40.392391 ignition[845]: INFO : files: op(18): [started] setting preset to enabled for "vmtoolsd.service" Jul 14 23:29:40.392391 ignition[845]: INFO : files: op(18): [finished] setting preset to enabled for "vmtoolsd.service" Jul 14 23:29:40.392391 ignition[845]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 14 23:29:40.392391 ignition[845]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 14 23:29:40.392391 ignition[845]: INFO : files: files passed Jul 14 23:29:40.392391 ignition[845]: INFO : Ignition finished successfully Jul 14 23:29:40.393969 systemd[1]: Finished ignition-files.service. Jul 14 23:29:40.397823 kernel: kauditd_printk_skb: 24 callbacks suppressed Jul 14 23:29:40.397854 kernel: audit: type=1130 audit(1752535780.392:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.395304 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 14 23:29:40.398178 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 14 23:29:40.398591 systemd[1]: Starting ignition-quench.service... Jul 14 23:29:40.400837 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 14 23:29:40.400891 systemd[1]: Finished ignition-quench.service. Jul 14 23:29:40.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.401994 initrd-setup-root-after-ignition[871]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 14 23:29:40.406028 kernel: audit: type=1130 audit(1752535780.399:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.406041 kernel: audit: type=1131 audit(1752535780.399:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.399000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.402346 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 14 23:29:40.408686 kernel: audit: type=1130 audit(1752535780.404:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.406137 systemd[1]: Reached target ignition-complete.target. Jul 14 23:29:40.409128 systemd[1]: Starting initrd-parse-etc.service... Jul 14 23:29:40.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.417317 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 14 23:29:40.423175 kernel: audit: type=1130 audit(1752535780.415:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.423190 kernel: audit: type=1131 audit(1752535780.415:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.417369 systemd[1]: Finished initrd-parse-etc.service. Jul 14 23:29:40.417531 systemd[1]: Reached target initrd-fs.target. Jul 14 23:29:40.422381 systemd[1]: Reached target initrd.target. Jul 14 23:29:40.422483 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 14 23:29:40.422939 systemd[1]: Starting dracut-pre-pivot.service... Jul 14 23:29:40.432813 kernel: audit: type=1130 audit(1752535780.427:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.429419 systemd[1]: Finished dracut-pre-pivot.service. Jul 14 23:29:40.429912 systemd[1]: Starting initrd-cleanup.service... Jul 14 23:29:40.436905 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 14 23:29:40.436966 systemd[1]: Finished initrd-cleanup.service. Jul 14 23:29:40.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.437585 systemd[1]: Stopped target nss-lookup.target. Jul 14 23:29:40.442107 kernel: audit: type=1130 audit(1752535780.435:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.442128 kernel: audit: type=1131 audit(1752535780.435:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.442217 systemd[1]: Stopped target remote-cryptsetup.target. Jul 14 23:29:40.442467 systemd[1]: Stopped target timers.target. Jul 14 23:29:40.442699 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 14 23:29:40.442949 systemd[1]: Stopped dracut-pre-pivot.service. Jul 14 23:29:40.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.443243 systemd[1]: Stopped target initrd.target. Jul 14 23:29:40.445735 systemd[1]: Stopped target basic.target. Jul 14 23:29:40.445866 kernel: audit: type=1131 audit(1752535780.441:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.445973 systemd[1]: Stopped target ignition-complete.target. Jul 14 23:29:40.446189 systemd[1]: Stopped target ignition-diskful.target. Jul 14 23:29:40.446405 systemd[1]: Stopped target initrd-root-device.target. Jul 14 23:29:40.446623 systemd[1]: Stopped target remote-fs.target. Jul 14 23:29:40.446837 systemd[1]: Stopped target remote-fs-pre.target. Jul 14 23:29:40.447063 systemd[1]: Stopped target sysinit.target. Jul 14 23:29:40.447321 systemd[1]: Stopped target local-fs.target. Jul 14 23:29:40.447550 systemd[1]: Stopped target local-fs-pre.target. Jul 14 23:29:40.447842 systemd[1]: Stopped target swap.target. Jul 14 23:29:40.448093 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 14 23:29:40.448285 systemd[1]: Stopped dracut-pre-mount.service. Jul 14 23:29:40.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.448571 systemd[1]: Stopped target cryptsetup.target. Jul 14 23:29:40.448781 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 14 23:29:40.448949 systemd[1]: Stopped dracut-initqueue.service. Jul 14 23:29:40.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.449234 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 14 23:29:40.449397 systemd[1]: Stopped ignition-fetch-offline.service. Jul 14 23:29:40.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.449669 systemd[1]: Stopped target paths.target. Jul 14 23:29:40.449876 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 14 23:29:40.451825 systemd[1]: Stopped systemd-ask-password-console.path. Jul 14 23:29:40.452045 systemd[1]: Stopped target slices.target. Jul 14 23:29:40.452247 systemd[1]: Stopped target sockets.target. Jul 14 23:29:40.452468 systemd[1]: iscsid.socket: Deactivated successfully. Jul 14 23:29:40.452609 systemd[1]: Closed iscsid.socket. Jul 14 23:29:40.452838 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 14 23:29:40.453009 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 14 23:29:40.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.453299 systemd[1]: ignition-files.service: Deactivated successfully. Jul 14 23:29:40.453452 systemd[1]: Stopped ignition-files.service. Jul 14 23:29:40.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.454154 systemd[1]: Stopping ignition-mount.service... Jul 14 23:29:40.454519 systemd[1]: Stopping iscsiuio.service... Jul 14 23:29:40.454717 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 14 23:29:40.454885 systemd[1]: Stopped kmod-static-nodes.service. Jul 14 23:29:40.455454 systemd[1]: Stopping sysroot-boot.service... Jul 14 23:29:40.455686 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 14 23:29:40.456012 systemd[1]: Stopped systemd-udev-trigger.service. Jul 14 23:29:40.456276 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 14 23:29:40.456457 systemd[1]: Stopped dracut-pre-trigger.service. Jul 14 23:29:40.458398 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 14 23:29:40.458602 systemd[1]: Stopped iscsiuio.service. Jul 14 23:29:40.458876 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 14 23:29:40.459049 systemd[1]: Closed iscsiuio.socket. Jul 14 23:29:40.460558 ignition[884]: INFO : Ignition 2.14.0 Jul 14 23:29:40.460558 ignition[884]: INFO : Stage: umount Jul 14 23:29:40.460558 ignition[884]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:29:40.460558 ignition[884]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:29:40.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.463905 ignition[884]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:29:40.463905 ignition[884]: INFO : umount: umount passed Jul 14 23:29:40.463905 ignition[884]: INFO : Ignition finished successfully Jul 14 23:29:40.464398 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 14 23:29:40.464809 systemd[1]: Stopped ignition-mount.service. Jul 14 23:29:40.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.465031 systemd[1]: Stopped target network.target. Jul 14 23:29:40.465622 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 14 23:29:40.465650 systemd[1]: Stopped ignition-disks.service. Jul 14 23:29:40.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.466274 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 14 23:29:40.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.466299 systemd[1]: Stopped ignition-kargs.service. Jul 14 23:29:40.466641 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 14 23:29:40.465000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.466672 systemd[1]: Stopped ignition-setup.service. Jul 14 23:29:40.467733 systemd[1]: Stopping systemd-networkd.service... Jul 14 23:29:40.468101 systemd[1]: Stopping systemd-resolved.service... Jul 14 23:29:40.468984 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 14 23:29:40.471417 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 14 23:29:40.471480 systemd[1]: Stopped systemd-networkd.service. Jul 14 23:29:40.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.472722 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 14 23:29:40.472775 systemd[1]: Stopped systemd-resolved.service. Jul 14 23:29:40.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.473361 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 14 23:29:40.473386 systemd[1]: Closed systemd-networkd.socket. Jul 14 23:29:40.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.473000 audit: BPF prog-id=9 op=UNLOAD Jul 14 23:29:40.473000 audit: BPF prog-id=6 op=UNLOAD Jul 14 23:29:40.474104 systemd[1]: Stopping network-cleanup.service... Jul 14 23:29:40.474205 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 14 23:29:40.474232 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 14 23:29:40.474368 systemd[1]: afterburn-network-kargs.service: Deactivated successfully. Jul 14 23:29:40.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.474394 systemd[1]: Stopped afterburn-network-kargs.service. Jul 14 23:29:40.474502 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 14 23:29:40.474524 systemd[1]: Stopped systemd-sysctl.service. Jul 14 23:29:40.474671 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 14 23:29:40.474692 systemd[1]: Stopped systemd-modules-load.service. Jul 14 23:29:40.474931 systemd[1]: Stopping systemd-udevd.service... Jul 14 23:29:40.477490 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 14 23:29:40.477911 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 14 23:29:40.477979 systemd[1]: Stopped systemd-udevd.service. Jul 14 23:29:40.478657 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 14 23:29:40.478680 systemd[1]: Closed systemd-udevd-control.socket. Jul 14 23:29:40.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.480555 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 14 23:29:40.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.480574 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 14 23:29:40.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.480689 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 14 23:29:40.480719 systemd[1]: Stopped dracut-pre-udev.service. Jul 14 23:29:40.480970 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 14 23:29:40.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.480993 systemd[1]: Stopped dracut-cmdline.service. Jul 14 23:29:40.481100 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 14 23:29:40.481126 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 14 23:29:40.481678 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 14 23:29:40.481812 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 14 23:29:40.481851 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 14 23:29:40.482181 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 14 23:29:40.482231 systemd[1]: Stopped network-cleanup.service. Jul 14 23:29:40.485389 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 14 23:29:40.485584 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 14 23:29:40.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.679731 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 14 23:29:40.680046 systemd[1]: Stopped sysroot-boot.service. Jul 14 23:29:40.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.680530 systemd[1]: Reached target initrd-switch-root.target. Jul 14 23:29:40.680845 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 14 23:29:40.681055 systemd[1]: Stopped initrd-setup-root.service. Jul 14 23:29:40.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.681941 systemd[1]: Starting initrd-switch-root.service... Jul 14 23:29:40.690956 systemd[1]: Switching root. Jul 14 23:29:40.707651 iscsid[736]: iscsid shutting down. Jul 14 23:29:40.707810 systemd-journald[216]: Received SIGTERM from PID 1 (systemd). Jul 14 23:29:40.707841 systemd-journald[216]: Journal stopped Jul 14 23:29:43.465667 kernel: SELinux: Class mctp_socket not defined in policy. Jul 14 23:29:43.465684 kernel: SELinux: Class anon_inode not defined in policy. Jul 14 23:29:43.465693 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 14 23:29:43.465699 kernel: SELinux: policy capability network_peer_controls=1 Jul 14 23:29:43.465704 kernel: SELinux: policy capability open_perms=1 Jul 14 23:29:43.465710 kernel: SELinux: policy capability extended_socket_class=1 Jul 14 23:29:43.465718 kernel: SELinux: policy capability always_check_network=0 Jul 14 23:29:43.465725 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 14 23:29:43.465730 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 14 23:29:43.465736 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 14 23:29:43.465742 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 14 23:29:43.465748 systemd[1]: Successfully loaded SELinux policy in 42.735ms. Jul 14 23:29:43.465757 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 5.980ms. Jul 14 23:29:43.465765 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 23:29:43.465773 systemd[1]: Detected virtualization vmware. Jul 14 23:29:43.465779 systemd[1]: Detected architecture x86-64. Jul 14 23:29:43.465785 systemd[1]: Detected first boot. Jul 14 23:29:43.465800 systemd[1]: Initializing machine ID from random generator. Jul 14 23:29:43.465821 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 14 23:29:43.465829 systemd[1]: Populated /etc with preset unit settings. Jul 14 23:29:43.465840 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 23:29:43.465851 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 23:29:43.465863 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 23:29:43.465871 systemd[1]: iscsid.service: Deactivated successfully. Jul 14 23:29:43.465880 systemd[1]: Stopped iscsid.service. Jul 14 23:29:43.465887 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 14 23:29:43.465907 systemd[1]: Stopped initrd-switch-root.service. Jul 14 23:29:43.465915 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 14 23:29:43.465922 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 14 23:29:43.465928 systemd[1]: Created slice system-addon\x2drun.slice. Jul 14 23:29:43.465935 systemd[1]: Created slice system-getty.slice. Jul 14 23:29:43.465943 systemd[1]: Created slice system-modprobe.slice. Jul 14 23:29:43.465950 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 14 23:29:43.465957 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 14 23:29:43.465964 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 14 23:29:43.465970 systemd[1]: Created slice user.slice. Jul 14 23:29:43.465977 systemd[1]: Started systemd-ask-password-console.path. Jul 14 23:29:43.465983 systemd[1]: Started systemd-ask-password-wall.path. Jul 14 23:29:43.465990 systemd[1]: Set up automount boot.automount. Jul 14 23:29:43.465998 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 14 23:29:43.466007 systemd[1]: Stopped target initrd-switch-root.target. Jul 14 23:29:43.466015 systemd[1]: Stopped target initrd-fs.target. Jul 14 23:29:43.466022 systemd[1]: Stopped target initrd-root-fs.target. Jul 14 23:29:43.466029 systemd[1]: Reached target integritysetup.target. Jul 14 23:29:43.466036 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 23:29:43.466043 systemd[1]: Reached target remote-fs.target. Jul 14 23:29:43.466050 systemd[1]: Reached target slices.target. Jul 14 23:29:43.466057 systemd[1]: Reached target swap.target. Jul 14 23:29:43.466065 systemd[1]: Reached target torcx.target. Jul 14 23:29:43.466072 systemd[1]: Reached target veritysetup.target. Jul 14 23:29:43.466079 systemd[1]: Listening on systemd-coredump.socket. Jul 14 23:29:43.466086 systemd[1]: Listening on systemd-initctl.socket. Jul 14 23:29:43.466093 systemd[1]: Listening on systemd-networkd.socket. Jul 14 23:29:43.466101 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 23:29:43.466108 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 23:29:43.466115 systemd[1]: Listening on systemd-userdbd.socket. Jul 14 23:29:43.466123 systemd[1]: Mounting dev-hugepages.mount... Jul 14 23:29:43.466130 systemd[1]: Mounting dev-mqueue.mount... Jul 14 23:29:43.466137 systemd[1]: Mounting media.mount... Jul 14 23:29:43.466144 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:29:43.466152 systemd[1]: Mounting sys-kernel-debug.mount... Jul 14 23:29:43.466159 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 14 23:29:43.466167 systemd[1]: Mounting tmp.mount... Jul 14 23:29:43.466174 systemd[1]: Starting flatcar-tmpfiles.service... Jul 14 23:29:43.466181 systemd[1]: Starting ignition-delete-config.service... Jul 14 23:29:43.466188 systemd[1]: Starting kmod-static-nodes.service... Jul 14 23:29:43.466195 systemd[1]: Starting modprobe@configfs.service... Jul 14 23:29:43.466202 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:29:43.466209 systemd[1]: Starting modprobe@drm.service... Jul 14 23:29:43.466216 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:29:43.466223 systemd[1]: Starting modprobe@fuse.service... Jul 14 23:29:43.466231 systemd[1]: Starting modprobe@loop.service... Jul 14 23:29:43.466238 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 14 23:29:43.466246 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 14 23:29:43.466253 systemd[1]: Stopped systemd-fsck-root.service. Jul 14 23:29:43.466260 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 14 23:29:43.466267 systemd[1]: Stopped systemd-fsck-usr.service. Jul 14 23:29:43.466274 systemd[1]: Stopped systemd-journald.service. Jul 14 23:29:43.466281 systemd[1]: Starting systemd-journald.service... Jul 14 23:29:43.466288 systemd[1]: Starting systemd-modules-load.service... Jul 14 23:29:43.466297 systemd[1]: Starting systemd-network-generator.service... Jul 14 23:29:43.466305 systemd[1]: Starting systemd-remount-fs.service... Jul 14 23:29:43.466312 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 23:29:43.466319 systemd[1]: verity-setup.service: Deactivated successfully. Jul 14 23:29:43.466326 systemd[1]: Stopped verity-setup.service. Jul 14 23:29:43.466333 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:29:43.466341 kernel: fuse: init (API version 7.34) Jul 14 23:29:43.466347 systemd[1]: Mounted dev-hugepages.mount. Jul 14 23:29:43.466355 systemd[1]: Mounted dev-mqueue.mount. Jul 14 23:29:43.466362 systemd[1]: Mounted media.mount. Jul 14 23:29:43.466369 systemd[1]: Mounted sys-kernel-debug.mount. Jul 14 23:29:43.466376 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 14 23:29:43.466383 systemd[1]: Mounted tmp.mount. Jul 14 23:29:43.466390 systemd[1]: Finished kmod-static-nodes.service. Jul 14 23:29:43.466397 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 14 23:29:43.466404 systemd[1]: Finished modprobe@configfs.service. Jul 14 23:29:43.466411 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:29:43.466419 kernel: loop: module loaded Jul 14 23:29:43.466426 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:29:43.466433 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 23:29:43.466440 systemd[1]: Finished modprobe@drm.service. Jul 14 23:29:43.466447 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:29:43.466455 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:29:43.466462 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 14 23:29:43.466469 systemd[1]: Finished modprobe@fuse.service. Jul 14 23:29:43.466477 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:29:43.466485 systemd[1]: Finished modprobe@loop.service. Jul 14 23:29:43.466494 systemd-journald[1001]: Journal started Jul 14 23:29:43.466522 systemd-journald[1001]: Runtime Journal (/run/log/journal/9259077fbb224600981190b1f8a573c8) is 4.8M, max 38.8M, 34.0M free. Jul 14 23:29:40.830000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 14 23:29:40.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 23:29:40.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 23:29:40.870000 audit: BPF prog-id=10 op=LOAD Jul 14 23:29:40.870000 audit: BPF prog-id=10 op=UNLOAD Jul 14 23:29:40.871000 audit: BPF prog-id=11 op=LOAD Jul 14 23:29:40.871000 audit: BPF prog-id=11 op=UNLOAD Jul 14 23:29:40.959000 audit[918]: AVC avc: denied { associate } for pid=918 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 14 23:29:40.959000 audit[918]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d8a2 a1=c0000cede0 a2=c0000d7040 a3=32 items=0 ppid=901 pid=918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:29:40.959000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 23:29:40.960000 audit[918]: AVC avc: denied { associate } for pid=918 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 14 23:29:40.960000 audit[918]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d979 a2=1ed a3=0 items=2 ppid=901 pid=918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:29:40.960000 audit: CWD cwd="/" Jul 14 23:29:40.960000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:40.960000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:40.960000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 23:29:43.344000 audit: BPF prog-id=12 op=LOAD Jul 14 23:29:43.344000 audit: BPF prog-id=3 op=UNLOAD Jul 14 23:29:43.344000 audit: BPF prog-id=13 op=LOAD Jul 14 23:29:43.344000 audit: BPF prog-id=14 op=LOAD Jul 14 23:29:43.344000 audit: BPF prog-id=4 op=UNLOAD Jul 14 23:29:43.344000 audit: BPF prog-id=5 op=UNLOAD Jul 14 23:29:43.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.347000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.354000 audit: BPF prog-id=12 op=UNLOAD Jul 14 23:29:43.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.417000 audit: BPF prog-id=15 op=LOAD Jul 14 23:29:43.417000 audit: BPF prog-id=16 op=LOAD Jul 14 23:29:43.417000 audit: BPF prog-id=17 op=LOAD Jul 14 23:29:43.417000 audit: BPF prog-id=13 op=UNLOAD Jul 14 23:29:43.417000 audit: BPF prog-id=14 op=UNLOAD Jul 14 23:29:43.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.462000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 14 23:29:43.462000 audit[1001]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffe6e9f0a70 a2=4000 a3=7ffe6e9f0b0c items=0 ppid=1 pid=1001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:29:43.467390 systemd[1]: Started systemd-journald.service. Jul 14 23:29:43.462000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 14 23:29:43.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.343923 systemd[1]: Queued start job for default target multi-user.target. Jul 14 23:29:43.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.959071 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 23:29:43.343931 systemd[1]: Unnecessary job was removed for dev-sda6.device. Jul 14 23:29:40.959499 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 23:29:43.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.347098 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 14 23:29:40.959520 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 23:29:43.467636 systemd[1]: Finished systemd-modules-load.service. Jul 14 23:29:40.959540 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 14 23:29:40.959546 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 14 23:29:40.959565 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 14 23:29:40.959572 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 14 23:29:43.468061 systemd[1]: Finished systemd-network-generator.service. Jul 14 23:29:43.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.959692 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 14 23:29:43.468241 jq[984]: true Jul 14 23:29:40.959715 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 23:29:40.959723 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 23:29:43.468378 systemd[1]: Finished systemd-remount-fs.service. Jul 14 23:29:40.960205 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 14 23:29:43.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:40.960226 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 14 23:29:40.960236 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.101: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.101 Jul 14 23:29:40.960245 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 14 23:29:40.960254 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.101: no such file or directory" path=/var/lib/torcx/store/3510.3.101 Jul 14 23:29:40.960262 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:40Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 14 23:29:43.140474 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:43Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 23:29:43.140626 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:43Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 23:29:43.469450 systemd[1]: Reached target network-pre.target. Jul 14 23:29:43.140689 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:43Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 23:29:43.140791 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:43Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 23:29:43.469694 jq[1018]: true Jul 14 23:29:43.140832 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:43Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 14 23:29:43.140877 /usr/lib/systemd/system-generators/torcx-generator[918]: time="2025-07-14T23:29:43Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 14 23:29:43.471034 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 14 23:29:43.472103 systemd[1]: Mounting sys-kernel-config.mount... Jul 14 23:29:43.474831 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 14 23:29:43.477688 systemd[1]: Starting systemd-hwdb-update.service... Jul 14 23:29:43.478733 systemd[1]: Starting systemd-journal-flush.service... Jul 14 23:29:43.478880 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:29:43.492055 systemd-journald[1001]: Time spent on flushing to /var/log/journal/9259077fbb224600981190b1f8a573c8 is 45.591ms for 1984 entries. Jul 14 23:29:43.492055 systemd-journald[1001]: System Journal (/var/log/journal/9259077fbb224600981190b1f8a573c8) is 8.0M, max 584.8M, 576.8M free. Jul 14 23:29:43.570906 systemd-journald[1001]: Received client request to flush runtime journal. Jul 14 23:29:43.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.479793 systemd[1]: Starting systemd-random-seed.service... Jul 14 23:29:43.480052 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 23:29:43.481122 systemd[1]: Starting systemd-sysctl.service... Jul 14 23:29:43.483402 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 14 23:29:43.483560 systemd[1]: Mounted sys-kernel-config.mount. Jul 14 23:29:43.498552 systemd[1]: Finished systemd-random-seed.service. Jul 14 23:29:43.498741 systemd[1]: Reached target first-boot-complete.target. Jul 14 23:29:43.509936 systemd[1]: Finished systemd-sysctl.service. Jul 14 23:29:43.517991 systemd[1]: Finished flatcar-tmpfiles.service. Jul 14 23:29:43.519058 systemd[1]: Starting systemd-sysusers.service... Jul 14 23:29:43.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.553870 systemd[1]: Finished systemd-sysusers.service. Jul 14 23:29:43.571481 systemd[1]: Finished systemd-journal-flush.service. Jul 14 23:29:43.609115 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 23:29:43.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.611996 ignition[1027]: Ignition 2.14.0 Jul 14 23:29:43.610123 systemd[1]: Starting systemd-udev-settle.service... Jul 14 23:29:43.612226 ignition[1027]: deleting config from guestinfo properties Jul 14 23:29:43.615985 ignition[1027]: Successfully deleted config Jul 14 23:29:43.619436 systemd[1]: Finished ignition-delete-config.service. Jul 14 23:29:43.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ignition-delete-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:43.620022 udevadm[1049]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 14 23:29:44.114187 systemd[1]: Finished systemd-hwdb-update.service. Jul 14 23:29:44.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:44.113000 audit: BPF prog-id=18 op=LOAD Jul 14 23:29:44.113000 audit: BPF prog-id=19 op=LOAD Jul 14 23:29:44.113000 audit: BPF prog-id=7 op=UNLOAD Jul 14 23:29:44.113000 audit: BPF prog-id=8 op=UNLOAD Jul 14 23:29:44.115379 systemd[1]: Starting systemd-udevd.service... Jul 14 23:29:44.127560 systemd-udevd[1050]: Using default interface naming scheme 'v252'. Jul 14 23:29:44.492000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:44.494000 audit: BPF prog-id=20 op=LOAD Jul 14 23:29:44.494304 systemd[1]: Started systemd-udevd.service. Jul 14 23:29:44.496437 systemd[1]: Starting systemd-networkd.service... Jul 14 23:29:44.516715 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 14 23:29:44.541824 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 14 23:29:44.546810 kernel: ACPI: button: Power Button [PWRF] Jul 14 23:29:44.563000 audit: BPF prog-id=21 op=LOAD Jul 14 23:29:44.563000 audit: BPF prog-id=22 op=LOAD Jul 14 23:29:44.563000 audit: BPF prog-id=23 op=LOAD Jul 14 23:29:44.566155 systemd[1]: Starting systemd-userdbd.service... Jul 14 23:29:44.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:44.594938 systemd[1]: Started systemd-userdbd.service. Jul 14 23:29:44.628000 audit[1062]: AVC avc: denied { confidentiality } for pid=1062 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 14 23:29:44.648345 systemd-networkd[1061]: lo: Link UP Jul 14 23:29:44.648350 systemd-networkd[1061]: lo: Gained carrier Jul 14 23:29:44.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:44.648670 systemd-networkd[1061]: Enumeration completed Jul 14 23:29:44.648733 systemd[1]: Started systemd-networkd.service. Jul 14 23:29:44.648744 systemd-networkd[1061]: ens192: Configuring with /etc/systemd/network/00-vmware.network. Jul 14 23:29:44.628000 audit[1062]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=560adddd0590 a1=338ac a2=7fe7c7e2fbc5 a3=5 items=110 ppid=1050 pid=1062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:29:44.628000 audit: CWD cwd="/" Jul 14 23:29:44.628000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=1 name=(null) inode=17064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=2 name=(null) inode=17064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=3 name=(null) inode=17065 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=4 name=(null) inode=17064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=5 name=(null) inode=17066 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=6 name=(null) inode=17064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=7 name=(null) inode=17067 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=8 name=(null) inode=17067 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=9 name=(null) inode=17068 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=10 name=(null) inode=17067 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=11 name=(null) inode=17069 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=12 name=(null) inode=17067 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=13 name=(null) inode=17070 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=14 name=(null) inode=17067 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=15 name=(null) inode=17071 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=16 name=(null) inode=17067 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=17 name=(null) inode=17072 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=18 name=(null) inode=17064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=19 name=(null) inode=17073 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=20 name=(null) inode=17073 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=21 name=(null) inode=17074 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=22 name=(null) inode=17073 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=23 name=(null) inode=17075 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=24 name=(null) inode=17073 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=25 name=(null) inode=17076 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=26 name=(null) inode=17073 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=27 name=(null) inode=17077 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=28 name=(null) inode=17073 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=29 name=(null) inode=17078 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=30 name=(null) inode=17064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=31 name=(null) inode=17079 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=32 name=(null) inode=17079 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=33 name=(null) inode=17080 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=34 name=(null) inode=17079 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=35 name=(null) inode=17081 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=36 name=(null) inode=17079 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=37 name=(null) inode=17082 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=38 name=(null) inode=17079 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=39 name=(null) inode=17083 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=40 name=(null) inode=17079 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=41 name=(null) inode=17084 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=42 name=(null) inode=17064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=43 name=(null) inode=17085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=44 name=(null) inode=17085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=45 name=(null) inode=17086 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=46 name=(null) inode=17085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=47 name=(null) inode=17087 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=48 name=(null) inode=17085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=49 name=(null) inode=17088 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=50 name=(null) inode=17085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=51 name=(null) inode=17089 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=52 name=(null) inode=17085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=53 name=(null) inode=17090 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=55 name=(null) inode=17091 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=56 name=(null) inode=17091 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.650854 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 14 23:29:44.650987 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 14 23:29:44.628000 audit: PATH item=57 name=(null) inode=17092 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=58 name=(null) inode=17091 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=59 name=(null) inode=17093 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=60 name=(null) inode=17091 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=61 name=(null) inode=17094 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=62 name=(null) inode=17094 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=63 name=(null) inode=17095 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=64 name=(null) inode=17094 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=65 name=(null) inode=17096 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=66 name=(null) inode=17094 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=67 name=(null) inode=17097 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=68 name=(null) inode=17094 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=69 name=(null) inode=17098 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=70 name=(null) inode=17094 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=71 name=(null) inode=17099 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=72 name=(null) inode=17091 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=73 name=(null) inode=17100 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=74 name=(null) inode=17100 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=75 name=(null) inode=17101 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=76 name=(null) inode=17100 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=77 name=(null) inode=17102 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=78 name=(null) inode=17100 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=79 name=(null) inode=17103 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=80 name=(null) inode=17100 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=81 name=(null) inode=17104 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=82 name=(null) inode=17100 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=83 name=(null) inode=17105 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=84 name=(null) inode=17091 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=85 name=(null) inode=17106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.652850 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): ens192: link becomes ready Jul 14 23:29:44.628000 audit: PATH item=86 name=(null) inode=17106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=87 name=(null) inode=17107 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=88 name=(null) inode=17106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=89 name=(null) inode=17108 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=90 name=(null) inode=17106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=91 name=(null) inode=17109 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=92 name=(null) inode=17106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=93 name=(null) inode=17110 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=94 name=(null) inode=17106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=95 name=(null) inode=17111 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=96 name=(null) inode=17091 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=97 name=(null) inode=17112 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=98 name=(null) inode=17112 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=99 name=(null) inode=17113 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=100 name=(null) inode=17112 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=101 name=(null) inode=17114 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=102 name=(null) inode=17112 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=103 name=(null) inode=17115 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=104 name=(null) inode=17112 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=105 name=(null) inode=17116 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=106 name=(null) inode=17112 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=107 name=(null) inode=17117 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PATH item=109 name=(null) inode=17125 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:29:44.628000 audit: PROCTITLE proctitle="(udev-worker)" Jul 14 23:29:44.653214 systemd-networkd[1061]: ens192: Link UP Jul 14 23:29:44.653301 systemd-networkd[1061]: ens192: Gained carrier Jul 14 23:29:44.666480 kernel: piix4_smbus 0000:00:07.3: SMBus Host Controller not enabled! Jul 14 23:29:44.674851 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input3 Jul 14 23:29:44.674874 kernel: vmw_vmci 0000:00:07.7: Found VMCI PCI device at 0x11080, irq 16 Jul 14 23:29:44.680776 kernel: vmw_vmci 0000:00:07.7: Using capabilities 0xc Jul 14 23:29:44.685808 kernel: Guest personality initialized and is active Jul 14 23:29:44.690007 kernel: VMCI host device registered (name=vmci, major=10, minor=125) Jul 14 23:29:44.690061 kernel: Initialized host personality Jul 14 23:29:44.693377 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 23:29:44.695816 kernel: mousedev: PS/2 mouse device common for all mice Jul 14 23:29:44.700749 (udev-worker)[1059]: id: Truncating stdout of 'dmi_memory_id' up to 16384 byte. Jul 14 23:29:44.712184 systemd[1]: Finished systemd-udev-settle.service. Jul 14 23:29:44.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:44.713151 systemd[1]: Starting lvm2-activation-early.service... Jul 14 23:29:44.729575 lvm[1083]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 23:29:44.755374 systemd[1]: Finished lvm2-activation-early.service. Jul 14 23:29:44.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:44.755561 systemd[1]: Reached target cryptsetup.target. Jul 14 23:29:44.756492 systemd[1]: Starting lvm2-activation.service... Jul 14 23:29:44.758663 lvm[1084]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 23:29:44.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:44.780399 systemd[1]: Finished lvm2-activation.service. Jul 14 23:29:44.780584 systemd[1]: Reached target local-fs-pre.target. Jul 14 23:29:44.780683 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 14 23:29:44.780695 systemd[1]: Reached target local-fs.target. Jul 14 23:29:44.780786 systemd[1]: Reached target machines.target. Jul 14 23:29:44.781780 systemd[1]: Starting ldconfig.service... Jul 14 23:29:44.782345 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:29:44.782379 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:29:44.783176 systemd[1]: Starting systemd-boot-update.service... Jul 14 23:29:44.783864 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 14 23:29:44.784682 systemd[1]: Starting systemd-machine-id-commit.service... Jul 14 23:29:44.785590 systemd[1]: Starting systemd-sysext.service... Jul 14 23:29:44.790115 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1086 (bootctl) Jul 14 23:29:44.790877 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 14 23:29:44.798055 systemd[1]: Unmounting usr-share-oem.mount... Jul 14 23:29:44.810076 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 14 23:29:44.810195 systemd[1]: Unmounted usr-share-oem.mount. Jul 14 23:29:44.812671 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 14 23:29:44.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:44.829821 kernel: loop0: detected capacity change from 0 to 224512 Jul 14 23:29:45.135765 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 14 23:29:45.136697 systemd[1]: Finished systemd-machine-id-commit.service. Jul 14 23:29:45.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.157815 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 14 23:29:45.171767 systemd-fsck[1095]: fsck.fat 4.2 (2021-01-31) Jul 14 23:29:45.171767 systemd-fsck[1095]: /dev/sda1: 790 files, 120725/258078 clusters Jul 14 23:29:45.172881 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 14 23:29:45.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.174027 systemd[1]: Mounting boot.mount... Jul 14 23:29:45.190812 kernel: loop1: detected capacity change from 0 to 224512 Jul 14 23:29:45.260556 systemd[1]: Mounted boot.mount. Jul 14 23:29:45.308957 systemd[1]: Finished systemd-boot-update.service. Jul 14 23:29:45.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.315376 (sd-sysext)[1099]: Using extensions 'kubernetes'. Jul 14 23:29:45.316191 (sd-sysext)[1099]: Merged extensions into '/usr'. Jul 14 23:29:45.327532 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:29:45.328569 systemd[1]: Mounting usr-share-oem.mount... Jul 14 23:29:45.329421 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:29:45.331121 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:29:45.331864 systemd[1]: Starting modprobe@loop.service... Jul 14 23:29:45.331996 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:29:45.332068 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:29:45.332146 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:29:45.334721 systemd[1]: Mounted usr-share-oem.mount. Jul 14 23:29:45.335031 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:29:45.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.333000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.335117 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:29:45.335440 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:29:45.335515 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:29:45.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.333000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.335826 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:29:45.335904 systemd[1]: Finished modprobe@loop.service. Jul 14 23:29:45.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.334000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.336190 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:29:45.336271 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 23:29:45.337300 systemd[1]: Finished systemd-sysext.service. Jul 14 23:29:45.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.338290 systemd[1]: Starting ensure-sysext.service... Jul 14 23:29:45.340593 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 14 23:29:45.342366 systemd[1]: Reloading. Jul 14 23:29:45.370569 /usr/lib/systemd/system-generators/torcx-generator[1125]: time="2025-07-14T23:29:45Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 23:29:45.370767 /usr/lib/systemd/system-generators/torcx-generator[1125]: time="2025-07-14T23:29:45Z" level=info msg="torcx already run" Jul 14 23:29:45.403939 systemd-tmpfiles[1106]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 14 23:29:45.408604 systemd-tmpfiles[1106]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 14 23:29:45.414925 systemd-tmpfiles[1106]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 14 23:29:45.445786 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 23:29:45.445817 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 23:29:45.458432 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 23:29:45.492000 audit: BPF prog-id=24 op=LOAD Jul 14 23:29:45.498658 kernel: kauditd_printk_skb: 235 callbacks suppressed Jul 14 23:29:45.498704 kernel: audit: type=1334 audit(1752535785.492:158): prog-id=24 op=LOAD Jul 14 23:29:45.498725 kernel: audit: type=1334 audit(1752535785.494:159): prog-id=25 op=LOAD Jul 14 23:29:45.498740 kernel: audit: type=1334 audit(1752535785.494:160): prog-id=18 op=UNLOAD Jul 14 23:29:45.498754 kernel: audit: type=1334 audit(1752535785.494:161): prog-id=19 op=UNLOAD Jul 14 23:29:45.498766 kernel: audit: type=1334 audit(1752535785.495:162): prog-id=26 op=LOAD Jul 14 23:29:45.494000 audit: BPF prog-id=25 op=LOAD Jul 14 23:29:45.494000 audit: BPF prog-id=18 op=UNLOAD Jul 14 23:29:45.494000 audit: BPF prog-id=19 op=UNLOAD Jul 14 23:29:45.495000 audit: BPF prog-id=26 op=LOAD Jul 14 23:29:45.500506 kernel: audit: type=1334 audit(1752535785.495:163): prog-id=20 op=UNLOAD Jul 14 23:29:45.500538 kernel: audit: type=1334 audit(1752535785.497:164): prog-id=27 op=LOAD Jul 14 23:29:45.495000 audit: BPF prog-id=20 op=UNLOAD Jul 14 23:29:45.497000 audit: BPF prog-id=27 op=LOAD Jul 14 23:29:45.503005 kernel: audit: type=1334 audit(1752535785.497:165): prog-id=15 op=UNLOAD Jul 14 23:29:45.503035 kernel: audit: type=1334 audit(1752535785.498:166): prog-id=28 op=LOAD Jul 14 23:29:45.497000 audit: BPF prog-id=15 op=UNLOAD Jul 14 23:29:45.498000 audit: BPF prog-id=28 op=LOAD Jul 14 23:29:45.504626 kernel: audit: type=1334 audit(1752535785.501:167): prog-id=29 op=LOAD Jul 14 23:29:45.501000 audit: BPF prog-id=29 op=LOAD Jul 14 23:29:45.501000 audit: BPF prog-id=16 op=UNLOAD Jul 14 23:29:45.501000 audit: BPF prog-id=17 op=UNLOAD Jul 14 23:29:45.502000 audit: BPF prog-id=30 op=LOAD Jul 14 23:29:45.502000 audit: BPF prog-id=21 op=UNLOAD Jul 14 23:29:45.502000 audit: BPF prog-id=31 op=LOAD Jul 14 23:29:45.502000 audit: BPF prog-id=32 op=LOAD Jul 14 23:29:45.502000 audit: BPF prog-id=22 op=UNLOAD Jul 14 23:29:45.502000 audit: BPF prog-id=23 op=UNLOAD Jul 14 23:29:45.513901 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:29:45.515035 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:29:45.516297 systemd[1]: Starting modprobe@loop.service... Jul 14 23:29:45.516490 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:29:45.516570 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:29:45.517035 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:29:45.517314 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:29:45.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.517876 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:29:45.518014 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:29:45.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.518690 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:29:45.518825 systemd[1]: Finished modprobe@loop.service. Jul 14 23:29:45.517000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.519242 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:29:45.519359 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 23:29:45.521247 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:29:45.522209 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:29:45.523159 systemd[1]: Starting modprobe@loop.service... Jul 14 23:29:45.523397 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:29:45.523475 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:29:45.524121 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:29:45.524256 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:29:45.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.524696 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:29:45.524822 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:29:45.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.525276 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:29:45.525516 systemd[1]: Finished modprobe@loop.service. Jul 14 23:29:45.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.528171 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:29:45.529114 systemd[1]: Starting modprobe@drm.service... Jul 14 23:29:45.529883 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:29:45.531243 systemd[1]: Starting modprobe@loop.service... Jul 14 23:29:45.531521 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:29:45.531651 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:29:45.532560 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 14 23:29:45.533518 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:29:45.533665 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:29:45.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.534130 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 23:29:45.534252 systemd[1]: Finished modprobe@drm.service. Jul 14 23:29:45.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.534686 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:29:45.534903 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:29:45.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.535238 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:29:45.535304 systemd[1]: Finished modprobe@loop.service. Jul 14 23:29:45.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.535706 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:29:45.535768 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 23:29:45.536399 systemd[1]: Finished ensure-sysext.service. Jul 14 23:29:45.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.632848 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 14 23:29:45.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.633963 systemd[1]: Starting audit-rules.service... Jul 14 23:29:45.634820 systemd[1]: Starting clean-ca-certificates.service... Jul 14 23:29:45.635663 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 14 23:29:45.634000 audit: BPF prog-id=33 op=LOAD Jul 14 23:29:45.638000 audit: BPF prog-id=34 op=LOAD Jul 14 23:29:45.639091 systemd[1]: Starting systemd-resolved.service... Jul 14 23:29:45.640887 systemd[1]: Starting systemd-timesyncd.service... Jul 14 23:29:45.641948 systemd[1]: Starting systemd-update-utmp.service... Jul 14 23:29:45.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.644382 systemd[1]: Finished clean-ca-certificates.service. Jul 14 23:29:45.644549 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 23:29:45.650000 audit[1203]: SYSTEM_BOOT pid=1203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.654414 systemd[1]: Finished systemd-update-utmp.service. Jul 14 23:29:45.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.675359 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 14 23:29:45.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:29:45.687000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 14 23:29:45.687000 audit[1218]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcfc317760 a2=420 a3=0 items=0 ppid=1198 pid=1218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:29:45.687000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 14 23:29:45.689273 augenrules[1218]: No rules Jul 14 23:29:45.689505 systemd[1]: Finished audit-rules.service. Jul 14 23:29:45.695725 systemd-resolved[1201]: Positive Trust Anchors: Jul 14 23:29:45.695946 systemd-resolved[1201]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 23:29:45.696017 systemd-resolved[1201]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 23:29:45.700900 ldconfig[1085]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 14 23:29:45.715891 systemd[1]: Started systemd-timesyncd.service. Jul 14 23:29:45.716048 systemd[1]: Reached target time-set.target. Jul 14 23:29:45.721429 systemd[1]: Finished ldconfig.service. Jul 14 23:29:45.722448 systemd[1]: Starting systemd-update-done.service... Jul 14 23:29:45.725862 systemd-resolved[1201]: Defaulting to hostname 'linux'. Jul 14 23:29:45.726958 systemd[1]: Started systemd-resolved.service. Jul 14 23:29:45.727110 systemd[1]: Reached target network.target. Jul 14 23:29:45.727211 systemd[1]: Reached target nss-lookup.target. Jul 14 23:29:45.727431 systemd[1]: Finished systemd-update-done.service. Jul 14 23:29:45.727557 systemd[1]: Reached target sysinit.target. Jul 14 23:29:45.727695 systemd[1]: Started motdgen.path. Jul 14 23:29:45.727835 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 14 23:29:45.728020 systemd[1]: Started logrotate.timer. Jul 14 23:29:45.728179 systemd[1]: Started mdadm.timer. Jul 14 23:29:45.728263 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 14 23:29:45.728356 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 14 23:29:45.728381 systemd[1]: Reached target paths.target. Jul 14 23:29:45.728465 systemd[1]: Reached target timers.target. Jul 14 23:29:45.728696 systemd[1]: Listening on dbus.socket. Jul 14 23:29:45.729514 systemd[1]: Starting docker.socket... Jul 14 23:29:45.731297 systemd[1]: Listening on sshd.socket. Jul 14 23:29:45.731470 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:29:45.731737 systemd[1]: Listening on docker.socket. Jul 14 23:29:45.731964 systemd[1]: Reached target sockets.target. Jul 14 23:29:45.732056 systemd[1]: Reached target basic.target. Jul 14 23:29:45.732177 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 23:29:45.732198 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 23:29:45.732847 systemd[1]: Starting containerd.service... Jul 14 23:29:45.733574 systemd[1]: Starting dbus.service... Jul 14 23:29:45.734531 systemd[1]: Starting enable-oem-cloudinit.service... Jul 14 23:29:45.735534 systemd[1]: Starting extend-filesystems.service... Jul 14 23:29:45.736316 jq[1229]: false Jul 14 23:29:45.735881 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 14 23:29:45.737255 systemd[1]: Starting motdgen.service... Jul 14 23:29:45.738476 systemd[1]: Starting prepare-helm.service... Jul 14 23:29:45.740401 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 14 23:29:45.741177 systemd[1]: Starting sshd-keygen.service... Jul 14 23:31:12.930378 systemd-timesyncd[1202]: Contacted time server 137.110.222.27:123 (0.flatcar.pool.ntp.org). Jul 14 23:31:12.930411 systemd-timesyncd[1202]: Initial clock synchronization to Mon 2025-07-14 23:31:12.930066 UTC. Jul 14 23:31:12.931865 systemd-resolved[1201]: Clock change detected. Flushing caches. Jul 14 23:31:12.931972 systemd[1]: Starting systemd-logind.service... Jul 14 23:31:12.932083 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:31:12.932130 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 14 23:31:12.932580 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 14 23:31:12.933541 systemd[1]: Starting update-engine.service... Jul 14 23:31:12.935363 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 14 23:31:12.937776 systemd[1]: Starting vmtoolsd.service... Jul 14 23:31:12.939393 jq[1243]: true Jul 14 23:31:12.939269 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 14 23:31:12.941161 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 14 23:31:12.949144 tar[1250]: linux-amd64/LICENSE Jul 14 23:31:12.949144 tar[1250]: linux-amd64/helm Jul 14 23:31:12.951139 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 14 23:31:12.951234 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 14 23:31:12.959759 extend-filesystems[1230]: Found loop1 Jul 14 23:31:12.960295 systemd[1]: Started vmtoolsd.service. Jul 14 23:31:12.960408 extend-filesystems[1230]: Found sda Jul 14 23:31:12.960556 extend-filesystems[1230]: Found sda1 Jul 14 23:31:12.960706 extend-filesystems[1230]: Found sda2 Jul 14 23:31:12.961024 extend-filesystems[1230]: Found sda3 Jul 14 23:31:12.961024 extend-filesystems[1230]: Found usr Jul 14 23:31:12.961024 extend-filesystems[1230]: Found sda4 Jul 14 23:31:12.961024 extend-filesystems[1230]: Found sda6 Jul 14 23:31:12.961024 extend-filesystems[1230]: Found sda7 Jul 14 23:31:12.961024 extend-filesystems[1230]: Found sda9 Jul 14 23:31:12.961024 extend-filesystems[1230]: Checking size of /dev/sda9 Jul 14 23:31:12.964401 jq[1251]: true Jul 14 23:31:12.969768 systemd[1]: motdgen.service: Deactivated successfully. Jul 14 23:31:12.969880 systemd[1]: Finished motdgen.service. Jul 14 23:31:12.997628 extend-filesystems[1230]: Old size kept for /dev/sda9 Jul 14 23:31:12.998983 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:31:12.998999 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:31:12.999443 dbus-daemon[1228]: [system] SELinux support is enabled Jul 14 23:31:12.999517 systemd[1]: Started dbus.service. Jul 14 23:31:12.999678 extend-filesystems[1230]: Found sr0 Jul 14 23:31:13.000754 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 14 23:31:13.000769 systemd[1]: Reached target system-config.target. Jul 14 23:31:13.000888 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 14 23:31:13.000898 systemd[1]: Reached target user-config.target. Jul 14 23:31:13.002587 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 14 23:31:13.002688 systemd[1]: Finished extend-filesystems.service. Jul 14 23:31:13.018236 update_engine[1241]: I0714 23:31:13.014951 1241 main.cc:92] Flatcar Update Engine starting Jul 14 23:31:13.022636 bash[1282]: Updated "/home/core/.ssh/authorized_keys" Jul 14 23:31:13.023128 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 14 23:31:13.023366 kernel: NET: Registered PF_VSOCK protocol family Jul 14 23:31:13.023933 systemd[1]: Started update-engine.service. Jul 14 23:31:13.024125 update_engine[1241]: I0714 23:31:13.024021 1241 update_check_scheduler.cc:74] Next update check in 3m54s Jul 14 23:31:13.025167 systemd[1]: Started locksmithd.service. Jul 14 23:31:13.049436 env[1252]: time="2025-07-14T23:31:13.049390694Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 14 23:31:13.051244 systemd-logind[1237]: Watching system buttons on /dev/input/event1 (Power Button) Jul 14 23:31:13.051259 systemd-logind[1237]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 14 23:31:13.051408 systemd-logind[1237]: New seat seat0. Jul 14 23:31:13.052952 systemd[1]: Started systemd-logind.service. Jul 14 23:31:13.073675 env[1252]: time="2025-07-14T23:31:13.073648001Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 14 23:31:13.073777 env[1252]: time="2025-07-14T23:31:13.073763065Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 14 23:31:13.075768 env[1252]: time="2025-07-14T23:31:13.075709752Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.187-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 14 23:31:13.075768 env[1252]: time="2025-07-14T23:31:13.075728715Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 14 23:31:13.075858 env[1252]: time="2025-07-14T23:31:13.075843087Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 23:31:13.075858 env[1252]: time="2025-07-14T23:31:13.075855844Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 14 23:31:13.075908 env[1252]: time="2025-07-14T23:31:13.075864047Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 14 23:31:13.075908 env[1252]: time="2025-07-14T23:31:13.075870583Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 14 23:31:13.075950 env[1252]: time="2025-07-14T23:31:13.075916273Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 14 23:31:13.076177 env[1252]: time="2025-07-14T23:31:13.076165421Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 14 23:31:13.076261 env[1252]: time="2025-07-14T23:31:13.076245836Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 23:31:13.076291 env[1252]: time="2025-07-14T23:31:13.076260049Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 14 23:31:13.076310 env[1252]: time="2025-07-14T23:31:13.076291964Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 14 23:31:13.076310 env[1252]: time="2025-07-14T23:31:13.076299404Z" level=info msg="metadata content store policy set" policy=shared Jul 14 23:31:13.078286 env[1252]: time="2025-07-14T23:31:13.078269374Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 14 23:31:13.078322 env[1252]: time="2025-07-14T23:31:13.078287545Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 14 23:31:13.078322 env[1252]: time="2025-07-14T23:31:13.078299946Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 14 23:31:13.078370 env[1252]: time="2025-07-14T23:31:13.078321530Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 14 23:31:13.078370 env[1252]: time="2025-07-14T23:31:13.078329951Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 14 23:31:13.078370 env[1252]: time="2025-07-14T23:31:13.078337564Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 14 23:31:13.078370 env[1252]: time="2025-07-14T23:31:13.078344259Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 14 23:31:13.078437 env[1252]: time="2025-07-14T23:31:13.078383780Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 14 23:31:13.078437 env[1252]: time="2025-07-14T23:31:13.078393648Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 14 23:31:13.078437 env[1252]: time="2025-07-14T23:31:13.078400720Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 14 23:31:13.078437 env[1252]: time="2025-07-14T23:31:13.078407400Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 14 23:31:13.078437 env[1252]: time="2025-07-14T23:31:13.078414751Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 14 23:31:13.078518 env[1252]: time="2025-07-14T23:31:13.078465691Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 14 23:31:13.078518 env[1252]: time="2025-07-14T23:31:13.078513626Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 14 23:31:13.078696 env[1252]: time="2025-07-14T23:31:13.078682382Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 14 23:31:13.078726 env[1252]: time="2025-07-14T23:31:13.078701925Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.078726 env[1252]: time="2025-07-14T23:31:13.078710475Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 14 23:31:13.078763 env[1252]: time="2025-07-14T23:31:13.078742101Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.078763 env[1252]: time="2025-07-14T23:31:13.078753252Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.078763 env[1252]: time="2025-07-14T23:31:13.078760792Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.078807 env[1252]: time="2025-07-14T23:31:13.078767239Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.078807 env[1252]: time="2025-07-14T23:31:13.078774137Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.078807 env[1252]: time="2025-07-14T23:31:13.078784026Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.078855 env[1252]: time="2025-07-14T23:31:13.078820553Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.078855 env[1252]: time="2025-07-14T23:31:13.078828764Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.078855 env[1252]: time="2025-07-14T23:31:13.078836494Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 14 23:31:13.078918 env[1252]: time="2025-07-14T23:31:13.078906770Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.078949 env[1252]: time="2025-07-14T23:31:13.078918379Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.078949 env[1252]: time="2025-07-14T23:31:13.078925645Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.078949 env[1252]: time="2025-07-14T23:31:13.078932955Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 14 23:31:13.078949 env[1252]: time="2025-07-14T23:31:13.078941849Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 14 23:31:13.078949 env[1252]: time="2025-07-14T23:31:13.078948187Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 14 23:31:13.079033 env[1252]: time="2025-07-14T23:31:13.078960999Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 14 23:31:13.079033 env[1252]: time="2025-07-14T23:31:13.078982652Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 14 23:31:13.079125 env[1252]: time="2025-07-14T23:31:13.079093966Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 14 23:31:13.081813 env[1252]: time="2025-07-14T23:31:13.079130420Z" level=info msg="Connect containerd service" Jul 14 23:31:13.081813 env[1252]: time="2025-07-14T23:31:13.079155171Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 14 23:31:13.081813 env[1252]: time="2025-07-14T23:31:13.079550072Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 23:31:13.081813 env[1252]: time="2025-07-14T23:31:13.079701037Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 14 23:31:13.081813 env[1252]: time="2025-07-14T23:31:13.079724095Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 14 23:31:13.081813 env[1252]: time="2025-07-14T23:31:13.080268918Z" level=info msg="containerd successfully booted in 0.049841s" Jul 14 23:31:13.081813 env[1252]: time="2025-07-14T23:31:13.081646480Z" level=info msg="Start subscribing containerd event" Jul 14 23:31:13.081813 env[1252]: time="2025-07-14T23:31:13.081683877Z" level=info msg="Start recovering state" Jul 14 23:31:13.081813 env[1252]: time="2025-07-14T23:31:13.081729516Z" level=info msg="Start event monitor" Jul 14 23:31:13.081813 env[1252]: time="2025-07-14T23:31:13.081746653Z" level=info msg="Start snapshots syncer" Jul 14 23:31:13.081813 env[1252]: time="2025-07-14T23:31:13.081753316Z" level=info msg="Start cni network conf syncer for default" Jul 14 23:31:13.081813 env[1252]: time="2025-07-14T23:31:13.081760077Z" level=info msg="Start streaming server" Jul 14 23:31:13.079802 systemd[1]: Started containerd.service. Jul 14 23:31:13.410080 tar[1250]: linux-amd64/README.md Jul 14 23:31:13.413154 systemd[1]: Finished prepare-helm.service. Jul 14 23:31:13.455565 locksmithd[1285]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 14 23:31:13.615559 systemd-networkd[1061]: ens192: Gained IPv6LL Jul 14 23:31:13.616756 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 14 23:31:13.617050 systemd[1]: Reached target network-online.target. Jul 14 23:31:13.683115 systemd[1]: Starting kubelet.service... Jul 14 23:31:14.702480 sshd_keygen[1253]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 14 23:31:14.715603 systemd[1]: Finished sshd-keygen.service. Jul 14 23:31:14.716812 systemd[1]: Starting issuegen.service... Jul 14 23:31:14.720407 systemd[1]: issuegen.service: Deactivated successfully. Jul 14 23:31:14.720501 systemd[1]: Finished issuegen.service. Jul 14 23:31:14.721572 systemd[1]: Starting systemd-user-sessions.service... Jul 14 23:31:14.725947 systemd[1]: Finished systemd-user-sessions.service. Jul 14 23:31:14.726878 systemd[1]: Started getty@tty1.service. Jul 14 23:31:14.727773 systemd[1]: Started serial-getty@ttyS0.service. Jul 14 23:31:14.727973 systemd[1]: Reached target getty.target. Jul 14 23:31:14.868244 systemd[1]: Started kubelet.service. Jul 14 23:31:14.868602 systemd[1]: Reached target multi-user.target. Jul 14 23:31:14.869546 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 14 23:31:14.874163 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 14 23:31:14.874258 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 14 23:31:14.874479 systemd[1]: Startup finished in 890ms (kernel) + 5.235s (initrd) + 6.908s (userspace) = 13.034s. Jul 14 23:31:14.918437 login[1356]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 14 23:31:14.919266 login[1357]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 14 23:31:14.929087 systemd[1]: Created slice user-500.slice. Jul 14 23:31:14.930019 systemd[1]: Starting user-runtime-dir@500.service... Jul 14 23:31:14.934839 systemd-logind[1237]: New session 1 of user core. Jul 14 23:31:14.937748 systemd-logind[1237]: New session 2 of user core. Jul 14 23:31:14.940223 systemd[1]: Finished user-runtime-dir@500.service. Jul 14 23:31:14.941586 systemd[1]: Starting user@500.service... Jul 14 23:31:14.945626 (systemd)[1363]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:31:15.047466 systemd[1363]: Queued start job for default target default.target. Jul 14 23:31:15.047895 systemd[1363]: Reached target paths.target. Jul 14 23:31:15.047911 systemd[1363]: Reached target sockets.target. Jul 14 23:31:15.047920 systemd[1363]: Reached target timers.target. Jul 14 23:31:15.047927 systemd[1363]: Reached target basic.target. Jul 14 23:31:15.047992 systemd[1]: Started user@500.service. Jul 14 23:31:15.048788 systemd[1]: Started session-1.scope. Jul 14 23:31:15.049302 systemd[1]: Started session-2.scope. Jul 14 23:31:15.049773 systemd[1363]: Reached target default.target. Jul 14 23:31:15.049864 systemd[1363]: Startup finished in 99ms. Jul 14 23:31:15.638805 kubelet[1360]: E0714 23:31:15.638780 1360 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:31:15.639876 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:31:15.639953 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:31:21.971218 systemd[1]: Created slice system-sshd.slice. Jul 14 23:31:21.972296 systemd[1]: Started sshd@0-139.178.70.110:22-221.158.143.67:38555.service. Jul 14 23:31:22.347446 sshd[1389]: Connection reset by 221.158.143.67 port 38555 [preauth] Jul 14 23:31:22.348241 systemd[1]: sshd@0-139.178.70.110:22-221.158.143.67:38555.service: Deactivated successfully. Jul 14 23:31:25.890586 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 14 23:31:25.890740 systemd[1]: Stopped kubelet.service. Jul 14 23:31:25.892016 systemd[1]: Starting kubelet.service... Jul 14 23:31:25.957846 systemd[1]: Started kubelet.service. Jul 14 23:31:25.998031 kubelet[1396]: E0714 23:31:25.997997 1396 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:31:26.000052 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:31:26.000157 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:31:36.250800 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 14 23:31:36.250951 systemd[1]: Stopped kubelet.service. Jul 14 23:31:36.252234 systemd[1]: Starting kubelet.service... Jul 14 23:31:36.452692 systemd[1]: Started kubelet.service. Jul 14 23:31:36.547845 kubelet[1406]: E0714 23:31:36.547771 1406 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:31:36.549173 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:31:36.549264 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:31:43.106610 systemd[1]: Started sshd@1-139.178.70.110:22-139.178.89.65:53738.service. Jul 14 23:31:43.139766 sshd[1412]: Accepted publickey for core from 139.178.89.65 port 53738 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:31:43.140706 sshd[1412]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:31:43.143864 systemd[1]: Started session-3.scope. Jul 14 23:31:43.144093 systemd-logind[1237]: New session 3 of user core. Jul 14 23:31:43.191772 systemd[1]: Started sshd@2-139.178.70.110:22-139.178.89.65:53742.service. Jul 14 23:31:43.235328 sshd[1417]: Accepted publickey for core from 139.178.89.65 port 53742 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:31:43.236238 sshd[1417]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:31:43.239562 systemd[1]: Started session-4.scope. Jul 14 23:31:43.239792 systemd-logind[1237]: New session 4 of user core. Jul 14 23:31:43.292691 systemd[1]: Started sshd@3-139.178.70.110:22-139.178.89.65:53758.service. Jul 14 23:31:43.293086 sshd[1417]: pam_unix(sshd:session): session closed for user core Jul 14 23:31:43.294579 systemd[1]: sshd@2-139.178.70.110:22-139.178.89.65:53742.service: Deactivated successfully. Jul 14 23:31:43.295000 systemd[1]: session-4.scope: Deactivated successfully. Jul 14 23:31:43.295349 systemd-logind[1237]: Session 4 logged out. Waiting for processes to exit. Jul 14 23:31:43.295813 systemd-logind[1237]: Removed session 4. Jul 14 23:31:43.328003 sshd[1422]: Accepted publickey for core from 139.178.89.65 port 53758 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:31:43.328754 sshd[1422]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:31:43.331396 systemd-logind[1237]: New session 5 of user core. Jul 14 23:31:43.331669 systemd[1]: Started session-5.scope. Jul 14 23:31:43.379043 sshd[1422]: pam_unix(sshd:session): session closed for user core Jul 14 23:31:43.381734 systemd[1]: Started sshd@4-139.178.70.110:22-139.178.89.65:53768.service. Jul 14 23:31:43.382215 systemd[1]: sshd@3-139.178.70.110:22-139.178.89.65:53758.service: Deactivated successfully. Jul 14 23:31:43.382889 systemd[1]: session-5.scope: Deactivated successfully. Jul 14 23:31:43.383350 systemd-logind[1237]: Session 5 logged out. Waiting for processes to exit. Jul 14 23:31:43.384026 systemd-logind[1237]: Removed session 5. Jul 14 23:31:43.417233 sshd[1428]: Accepted publickey for core from 139.178.89.65 port 53768 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:31:43.418281 sshd[1428]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:31:43.421123 systemd-logind[1237]: New session 6 of user core. Jul 14 23:31:43.421950 systemd[1]: Started session-6.scope. Jul 14 23:31:43.473755 sshd[1428]: pam_unix(sshd:session): session closed for user core Jul 14 23:31:43.476294 systemd[1]: Started sshd@5-139.178.70.110:22-139.178.89.65:53778.service. Jul 14 23:31:43.477536 systemd[1]: sshd@4-139.178.70.110:22-139.178.89.65:53768.service: Deactivated successfully. Jul 14 23:31:43.478042 systemd[1]: session-6.scope: Deactivated successfully. Jul 14 23:31:43.478471 systemd-logind[1237]: Session 6 logged out. Waiting for processes to exit. Jul 14 23:31:43.479037 systemd-logind[1237]: Removed session 6. Jul 14 23:31:43.512017 sshd[1434]: Accepted publickey for core from 139.178.89.65 port 53778 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:31:43.513012 sshd[1434]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:31:43.516249 systemd-logind[1237]: New session 7 of user core. Jul 14 23:31:43.516815 systemd[1]: Started session-7.scope. Jul 14 23:31:43.577824 sudo[1438]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 14 23:31:43.578023 sudo[1438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 23:31:43.584443 dbus-daemon[1228]: \xd0\xed\u0001~\xbdU: received setenforce notice (enforcing=830131504) Jul 14 23:31:43.584811 sudo[1438]: pam_unix(sudo:session): session closed for user root Jul 14 23:31:43.587368 sshd[1434]: pam_unix(sshd:session): session closed for user core Jul 14 23:31:43.589930 systemd[1]: Started sshd@6-139.178.70.110:22-139.178.89.65:53780.service. Jul 14 23:31:43.592407 systemd[1]: sshd@5-139.178.70.110:22-139.178.89.65:53778.service: Deactivated successfully. Jul 14 23:31:43.592931 systemd[1]: session-7.scope: Deactivated successfully. Jul 14 23:31:43.593734 systemd-logind[1237]: Session 7 logged out. Waiting for processes to exit. Jul 14 23:31:43.594329 systemd-logind[1237]: Removed session 7. Jul 14 23:31:43.628313 sshd[1441]: Accepted publickey for core from 139.178.89.65 port 53780 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:31:43.629136 sshd[1441]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:31:43.632086 systemd[1]: Started session-8.scope. Jul 14 23:31:43.632875 systemd-logind[1237]: New session 8 of user core. Jul 14 23:31:43.683540 sudo[1446]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 14 23:31:43.683714 sudo[1446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 23:31:43.685769 sudo[1446]: pam_unix(sudo:session): session closed for user root Jul 14 23:31:43.689323 sudo[1445]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 14 23:31:43.689518 sudo[1445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 23:31:43.696696 systemd[1]: Stopping audit-rules.service... Jul 14 23:31:43.697000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 23:31:43.698573 kernel: kauditd_printk_skb: 39 callbacks suppressed Jul 14 23:31:43.698622 kernel: audit: type=1305 audit(1752535903.697:205): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 23:31:43.697000 audit[1449]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdbabe4f30 a2=420 a3=0 items=0 ppid=1 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:43.705433 kernel: audit: type=1300 audit(1752535903.697:205): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdbabe4f30 a2=420 a3=0 items=0 ppid=1 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:43.705470 kernel: audit: type=1327 audit(1752535903.697:205): proctitle=2F7362696E2F617564697463746C002D44 Jul 14 23:31:43.697000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 14 23:31:43.705520 auditctl[1449]: No rules Jul 14 23:31:43.709977 kernel: audit: type=1131 audit(1752535903.705:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.705847 systemd[1]: audit-rules.service: Deactivated successfully. Jul 14 23:31:43.705956 systemd[1]: Stopped audit-rules.service. Jul 14 23:31:43.710435 systemd[1]: Starting audit-rules.service... Jul 14 23:31:43.720575 augenrules[1466]: No rules Jul 14 23:31:43.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.721591 sudo[1445]: pam_unix(sudo:session): session closed for user root Jul 14 23:31:43.721026 systemd[1]: Finished audit-rules.service. Jul 14 23:31:43.721000 audit[1445]: USER_END pid=1445 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.727491 kernel: audit: type=1130 audit(1752535903.720:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.727530 kernel: audit: type=1106 audit(1752535903.721:208): pid=1445 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.726952 systemd[1]: Started sshd@7-139.178.70.110:22-139.178.89.65:53794.service. Jul 14 23:31:43.726853 sshd[1441]: pam_unix(sshd:session): session closed for user core Jul 14 23:31:43.729101 systemd[1]: sshd@6-139.178.70.110:22-139.178.89.65:53780.service: Deactivated successfully. Jul 14 23:31:43.729494 systemd[1]: session-8.scope: Deactivated successfully. Jul 14 23:31:43.730308 systemd-logind[1237]: Session 8 logged out. Waiting for processes to exit. Jul 14 23:31:43.730841 systemd-logind[1237]: Removed session 8. Jul 14 23:31:43.721000 audit[1445]: CRED_DISP pid=1445 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.737120 kernel: audit: type=1104 audit(1752535903.721:209): pid=1445 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.737152 kernel: audit: type=1130 audit(1752535903.726:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.110:22-139.178.89.65:53794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.110:22-139.178.89.65:53794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.728000 audit[1441]: USER_END pid=1441 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:31:43.740716 kernel: audit: type=1106 audit(1752535903.728:211): pid=1441 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:31:43.740740 kernel: audit: type=1104 audit(1752535903.728:212): pid=1441 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:31:43.728000 audit[1441]: CRED_DISP pid=1441 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:31:43.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.110:22-139.178.89.65:53780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.767378 sshd[1471]: Accepted publickey for core from 139.178.89.65 port 53794 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:31:43.766000 audit[1471]: USER_ACCT pid=1471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:31:43.767000 audit[1471]: CRED_ACQ pid=1471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:31:43.767000 audit[1471]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdeeaea330 a2=3 a3=0 items=0 ppid=1 pid=1471 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:43.767000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:31:43.768588 sshd[1471]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:31:43.771604 systemd[1]: Started session-9.scope. Jul 14 23:31:43.771812 systemd-logind[1237]: New session 9 of user core. Jul 14 23:31:43.774000 audit[1471]: USER_START pid=1471 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:31:43.775000 audit[1474]: CRED_ACQ pid=1474 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:31:43.819936 sudo[1475]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 14 23:31:43.820074 sudo[1475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 23:31:43.819000 audit[1475]: USER_ACCT pid=1475 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.819000 audit[1475]: CRED_REFR pid=1475 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.820000 audit[1475]: USER_START pid=1475 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:31:43.837367 systemd[1]: Starting docker.service... Jul 14 23:31:43.864790 env[1485]: time="2025-07-14T23:31:43.864755408Z" level=info msg="Starting up" Jul 14 23:31:43.865583 env[1485]: time="2025-07-14T23:31:43.865570915Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 23:31:43.865688 env[1485]: time="2025-07-14T23:31:43.865678761Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 23:31:43.865739 env[1485]: time="2025-07-14T23:31:43.865728291Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 23:31:43.865797 env[1485]: time="2025-07-14T23:31:43.865787651Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 23:31:43.866749 env[1485]: time="2025-07-14T23:31:43.866738235Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 23:31:43.866803 env[1485]: time="2025-07-14T23:31:43.866793242Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 23:31:43.866849 env[1485]: time="2025-07-14T23:31:43.866837740Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 23:31:43.866893 env[1485]: time="2025-07-14T23:31:43.866884222Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 23:31:43.939829 env[1485]: time="2025-07-14T23:31:43.939772217Z" level=info msg="Loading containers: start." Jul 14 23:31:43.984000 audit[1516]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1516 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:43.984000 audit[1516]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fffc1758380 a2=0 a3=7fffc175836c items=0 ppid=1485 pid=1516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:43.984000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 14 23:31:43.985000 audit[1518]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1518 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:43.985000 audit[1518]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe41b94730 a2=0 a3=7ffe41b9471c items=0 ppid=1485 pid=1518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:43.985000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 14 23:31:43.986000 audit[1520]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1520 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:43.986000 audit[1520]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffeedaf8990 a2=0 a3=7ffeedaf897c items=0 ppid=1485 pid=1520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:43.986000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 23:31:43.987000 audit[1522]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1522 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:43.987000 audit[1522]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc992b9080 a2=0 a3=7ffc992b906c items=0 ppid=1485 pid=1522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:43.987000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 23:31:43.989000 audit[1524]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1524 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:43.989000 audit[1524]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd6337d040 a2=0 a3=7ffd6337d02c items=0 ppid=1485 pid=1524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:43.989000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 14 23:31:44.002000 audit[1529]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1529 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.002000 audit[1529]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffef5b1bbc0 a2=0 a3=7ffef5b1bbac items=0 ppid=1485 pid=1529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.002000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 14 23:31:44.004000 audit[1531]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1531 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.004000 audit[1531]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffdf19b770 a2=0 a3=7fffdf19b75c items=0 ppid=1485 pid=1531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.004000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 14 23:31:44.006000 audit[1533]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1533 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.006000 audit[1533]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff7acd4810 a2=0 a3=7fff7acd47fc items=0 ppid=1485 pid=1533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.006000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 14 23:31:44.007000 audit[1535]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1535 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.007000 audit[1535]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffde2b3b3a0 a2=0 a3=7ffde2b3b38c items=0 ppid=1485 pid=1535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.007000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:31:44.010000 audit[1539]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1539 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.010000 audit[1539]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe53510790 a2=0 a3=7ffe5351077c items=0 ppid=1485 pid=1539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.010000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:31:44.016000 audit[1540]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1540 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.016000 audit[1540]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc46dcd6e0 a2=0 a3=7ffc46dcd6cc items=0 ppid=1485 pid=1540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.016000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:31:44.024389 kernel: Initializing XFRM netlink socket Jul 14 23:31:44.046654 env[1485]: time="2025-07-14T23:31:44.046636083Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 14 23:31:44.062000 audit[1548]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1548 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.062000 audit[1548]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd1358f540 a2=0 a3=7ffd1358f52c items=0 ppid=1485 pid=1548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.062000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 14 23:31:44.070000 audit[1551]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1551 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.070000 audit[1551]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff5b7ec3e0 a2=0 a3=7fff5b7ec3cc items=0 ppid=1485 pid=1551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.070000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 14 23:31:44.072000 audit[1554]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1554 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.072000 audit[1554]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff96349320 a2=0 a3=7fff9634930c items=0 ppid=1485 pid=1554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.072000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 14 23:31:44.073000 audit[1556]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1556 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.073000 audit[1556]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcb05f8df0 a2=0 a3=7ffcb05f8ddc items=0 ppid=1485 pid=1556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.073000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 14 23:31:44.074000 audit[1558]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1558 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.074000 audit[1558]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffca07a0950 a2=0 a3=7ffca07a093c items=0 ppid=1485 pid=1558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.074000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 14 23:31:44.076000 audit[1560]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1560 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.076000 audit[1560]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc0addaf60 a2=0 a3=7ffc0addaf4c items=0 ppid=1485 pid=1560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.076000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 14 23:31:44.077000 audit[1562]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1562 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.077000 audit[1562]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffeaa08d880 a2=0 a3=7ffeaa08d86c items=0 ppid=1485 pid=1562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.077000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 14 23:31:44.083000 audit[1565]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1565 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.083000 audit[1565]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc969bd8a0 a2=0 a3=7ffc969bd88c items=0 ppid=1485 pid=1565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.083000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 14 23:31:44.084000 audit[1567]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1567 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.084000 audit[1567]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffcf67a4ba0 a2=0 a3=7ffcf67a4b8c items=0 ppid=1485 pid=1567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.084000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 23:31:44.085000 audit[1569]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1569 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.085000 audit[1569]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc6e3dc0a0 a2=0 a3=7ffc6e3dc08c items=0 ppid=1485 pid=1569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.085000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 23:31:44.087000 audit[1571]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1571 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.087000 audit[1571]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcb0ae4410 a2=0 a3=7ffcb0ae43fc items=0 ppid=1485 pid=1571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.087000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 14 23:31:44.087768 systemd-networkd[1061]: docker0: Link UP Jul 14 23:31:44.091000 audit[1575]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1575 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.091000 audit[1575]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcb45e3900 a2=0 a3=7ffcb45e38ec items=0 ppid=1485 pid=1575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.091000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:31:44.095000 audit[1576]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1576 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:44.095000 audit[1576]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff302cd830 a2=0 a3=7fff302cd81c items=0 ppid=1485 pid=1576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:44.095000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:31:44.096257 env[1485]: time="2025-07-14T23:31:44.096239196Z" level=info msg="Loading containers: done." Jul 14 23:31:44.102999 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1783199556-merged.mount: Deactivated successfully. Jul 14 23:31:44.108251 env[1485]: time="2025-07-14T23:31:44.108229634Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 14 23:31:44.108469 env[1485]: time="2025-07-14T23:31:44.108458412Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 14 23:31:44.108674 env[1485]: time="2025-07-14T23:31:44.108664526Z" level=info msg="Daemon has completed initialization" Jul 14 23:31:44.114318 systemd[1]: Started docker.service. Jul 14 23:31:44.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:44.122048 env[1485]: time="2025-07-14T23:31:44.122024803Z" level=info msg="API listen on /run/docker.sock" Jul 14 23:31:44.892498 env[1252]: time="2025-07-14T23:31:44.892467933Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\"" Jul 14 23:31:45.442608 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1894079750.mount: Deactivated successfully. Jul 14 23:31:46.529726 env[1252]: time="2025-07-14T23:31:46.529682210Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:46.530561 env[1252]: time="2025-07-14T23:31:46.530543423Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8c5b95b1b5cb4a908fcbbbe81697c57019f9e9d89bfb5e0355235d440b7a6aa9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:46.531855 env[1252]: time="2025-07-14T23:31:46.531841995Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:46.532505 env[1252]: time="2025-07-14T23:31:46.532493157Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0f5764551d7de4ef70489ff8a70f32df7dea00701f5545af089b60bc5ede4f6f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:46.532959 env[1252]: time="2025-07-14T23:31:46.532944656Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\" returns image reference \"sha256:8c5b95b1b5cb4a908fcbbbe81697c57019f9e9d89bfb5e0355235d440b7a6aa9\"" Jul 14 23:31:46.533341 env[1252]: time="2025-07-14T23:31:46.533318924Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\"" Jul 14 23:31:46.776146 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 14 23:31:46.776274 systemd[1]: Stopped kubelet.service. Jul 14 23:31:46.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:46.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:46.777313 systemd[1]: Starting kubelet.service... Jul 14 23:31:46.833912 systemd[1]: Started kubelet.service. Jul 14 23:31:46.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:46.923866 kubelet[1612]: E0714 23:31:46.923828 1612 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:31:46.924839 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:31:46.924919 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:31:46.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 23:31:48.241996 env[1252]: time="2025-07-14T23:31:48.241966307Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:48.256978 env[1252]: time="2025-07-14T23:31:48.256942825Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77d0e7de0c6b41e2331c3997698c3f917527cf7bbe462f5c813f514e788436de,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:48.276568 env[1252]: time="2025-07-14T23:31:48.276540451Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:48.290301 env[1252]: time="2025-07-14T23:31:48.290272885Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3425f29c94a77d74cb89f38413e6274277dcf5e2bc7ab6ae953578a91e9e8356,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:48.290981 env[1252]: time="2025-07-14T23:31:48.290966067Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\" returns image reference \"sha256:77d0e7de0c6b41e2331c3997698c3f917527cf7bbe462f5c813f514e788436de\"" Jul 14 23:31:48.291834 env[1252]: time="2025-07-14T23:31:48.291812780Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\"" Jul 14 23:31:49.932328 env[1252]: time="2025-07-14T23:31:49.932287568Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:49.942463 env[1252]: time="2025-07-14T23:31:49.942427802Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b34d1cd163151c2491919f315274d85bff904721213f2b19341b403a28a39ae2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:49.945529 env[1252]: time="2025-07-14T23:31:49.945501748Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:49.951711 env[1252]: time="2025-07-14T23:31:49.951680116Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:130f633cbd1d70e2f4655350153cb3fc469f4d5a6310b4f0b49d93fb2ba2132b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:49.952215 env[1252]: time="2025-07-14T23:31:49.952191424Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\" returns image reference \"sha256:b34d1cd163151c2491919f315274d85bff904721213f2b19341b403a28a39ae2\"" Jul 14 23:31:49.952822 env[1252]: time="2025-07-14T23:31:49.952801482Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\"" Jul 14 23:31:50.958611 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount542471494.mount: Deactivated successfully. Jul 14 23:31:51.691877 env[1252]: time="2025-07-14T23:31:51.691827959Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:51.692681 env[1252]: time="2025-07-14T23:31:51.692656090Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:63f0cbe3b7339c5d006efc9964228e48271bae73039320037c451b5e8f763e02,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:51.693685 env[1252]: time="2025-07-14T23:31:51.693664133Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:51.694567 env[1252]: time="2025-07-14T23:31:51.694548520Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:b13d9da413b983d130bf090b83fce12e1ccc704e95f366da743c18e964d9d7e9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:51.694934 env[1252]: time="2025-07-14T23:31:51.694918827Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\" returns image reference \"sha256:63f0cbe3b7339c5d006efc9964228e48271bae73039320037c451b5e8f763e02\"" Jul 14 23:31:51.695474 env[1252]: time="2025-07-14T23:31:51.695460873Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 14 23:31:52.143608 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1192906100.mount: Deactivated successfully. Jul 14 23:31:53.156072 env[1252]: time="2025-07-14T23:31:53.156030595Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:53.206720 env[1252]: time="2025-07-14T23:31:53.206640035Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:53.223582 env[1252]: time="2025-07-14T23:31:53.223544848Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:53.238037 env[1252]: time="2025-07-14T23:31:53.237994730Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:53.239199 env[1252]: time="2025-07-14T23:31:53.238710653Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jul 14 23:31:53.239578 env[1252]: time="2025-07-14T23:31:53.239563552Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 14 23:31:53.796789 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1837482857.mount: Deactivated successfully. Jul 14 23:31:53.799371 env[1252]: time="2025-07-14T23:31:53.799315392Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:53.800057 env[1252]: time="2025-07-14T23:31:53.800037404Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:53.801059 env[1252]: time="2025-07-14T23:31:53.801040005Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:53.802170 env[1252]: time="2025-07-14T23:31:53.802150611Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:53.802756 env[1252]: time="2025-07-14T23:31:53.802732582Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 14 23:31:53.803140 env[1252]: time="2025-07-14T23:31:53.803125522Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Jul 14 23:31:54.306930 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1212584074.mount: Deactivated successfully. Jul 14 23:31:56.364503 env[1252]: time="2025-07-14T23:31:56.364468460Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:56.376087 env[1252]: time="2025-07-14T23:31:56.376061205Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:56.380685 env[1252]: time="2025-07-14T23:31:56.380667713Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:56.385413 env[1252]: time="2025-07-14T23:31:56.385395281Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:31:56.386226 env[1252]: time="2025-07-14T23:31:56.386206364Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\"" Jul 14 23:31:56.957489 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 14 23:31:56.965061 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 14 23:31:56.965168 kernel: audit: type=1130 audit(1752535916.956:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:56.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:56.957607 systemd[1]: Stopped kubelet.service. Jul 14 23:31:56.958590 systemd[1]: Starting kubelet.service... Jul 14 23:31:56.968375 kernel: audit: type=1131 audit(1752535916.956:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:56.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:57.854658 update_engine[1241]: I0714 23:31:57.854449 1241 update_attempter.cc:509] Updating boot flags... Jul 14 23:31:58.150760 systemd[1]: Started sshd@8-139.178.70.110:22-222.172.32.246:4758.service. Jul 14 23:31:58.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.110:22-222.172.32.246:4758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:58.154591 kernel: audit: type=1130 audit(1752535918.149:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.110:22-222.172.32.246:4758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:58.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 23:31:58.431875 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 14 23:31:58.431940 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 14 23:31:58.432134 systemd[1]: Stopped kubelet.service. Jul 14 23:31:58.434833 systemd[1]: Starting kubelet.service... Jul 14 23:31:58.436363 kernel: audit: type=1130 audit(1752535918.430:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 23:31:58.454845 systemd[1]: Reloading. Jul 14 23:31:58.516728 /usr/lib/systemd/system-generators/torcx-generator[1687]: time="2025-07-14T23:31:58Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 23:31:58.516746 /usr/lib/systemd/system-generators/torcx-generator[1687]: time="2025-07-14T23:31:58Z" level=info msg="torcx already run" Jul 14 23:31:58.562542 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 23:31:58.562555 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 23:31:58.574258 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 23:31:58.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.622411 kernel: audit: type=1400 audit(1752535918.613:255): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.622449 kernel: audit: type=1400 audit(1752535918.613:256): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.622466 kernel: audit: type=1400 audit(1752535918.613:257): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.622481 kernel: audit: type=1400 audit(1752535918.613:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.627144 kernel: audit: type=1400 audit(1752535918.613:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.627222 kernel: audit: type=1400 audit(1752535918.613:260): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.616000 audit: BPF prog-id=40 op=LOAD Jul 14 23:31:58.616000 audit: BPF prog-id=34 op=UNLOAD Jul 14 23:31:58.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.619000 audit: BPF prog-id=41 op=LOAD Jul 14 23:31:58.619000 audit: BPF prog-id=38 op=UNLOAD Jul 14 23:31:58.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.623000 audit: BPF prog-id=42 op=LOAD Jul 14 23:31:58.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.628000 audit: BPF prog-id=43 op=LOAD Jul 14 23:31:58.629000 audit: BPF prog-id=24 op=UNLOAD Jul 14 23:31:58.629000 audit: BPF prog-id=25 op=UNLOAD Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit: BPF prog-id=44 op=LOAD Jul 14 23:31:58.630000 audit: BPF prog-id=33 op=UNLOAD Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit: BPF prog-id=45 op=LOAD Jul 14 23:31:58.631000 audit: BPF prog-id=35 op=UNLOAD Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit: BPF prog-id=46 op=LOAD Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit: BPF prog-id=47 op=LOAD Jul 14 23:31:58.631000 audit: BPF prog-id=36 op=UNLOAD Jul 14 23:31:58.631000 audit: BPF prog-id=37 op=UNLOAD Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.631000 audit: BPF prog-id=48 op=LOAD Jul 14 23:31:58.631000 audit: BPF prog-id=26 op=UNLOAD Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit: BPF prog-id=49 op=LOAD Jul 14 23:31:58.632000 audit: BPF prog-id=27 op=UNLOAD Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit: BPF prog-id=50 op=LOAD Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit: BPF prog-id=51 op=LOAD Jul 14 23:31:58.632000 audit: BPF prog-id=28 op=UNLOAD Jul 14 23:31:58.632000 audit: BPF prog-id=29 op=UNLOAD Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit: BPF prog-id=52 op=LOAD Jul 14 23:31:58.632000 audit: BPF prog-id=30 op=UNLOAD Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit: BPF prog-id=53 op=LOAD Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:58.633000 audit: BPF prog-id=54 op=LOAD Jul 14 23:31:58.633000 audit: BPF prog-id=31 op=UNLOAD Jul 14 23:31:58.633000 audit: BPF prog-id=32 op=UNLOAD Jul 14 23:31:58.764678 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 14 23:31:58.764742 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 14 23:31:58.765054 systemd[1]: Stopped kubelet.service. Jul 14 23:31:58.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 23:31:58.766963 systemd[1]: Starting kubelet.service... Jul 14 23:31:59.219767 systemd[1]: Started kubelet.service. Jul 14 23:31:59.218000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:31:59.369097 sshd[1658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.172.32.246 user=root Jul 14 23:31:59.367000 audit[1658]: USER_AUTH pid=1658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=222.172.32.246 addr=222.172.32.246 terminal=ssh res=failed' Jul 14 23:31:59.397628 kubelet[1751]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 23:31:59.397862 kubelet[1751]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 14 23:31:59.397906 kubelet[1751]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 23:31:59.397999 kubelet[1751]: I0714 23:31:59.397982 1751 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 23:31:59.631652 kubelet[1751]: I0714 23:31:59.631624 1751 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 14 23:31:59.631652 kubelet[1751]: I0714 23:31:59.631644 1751 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 23:31:59.631822 kubelet[1751]: I0714 23:31:59.631812 1751 server.go:954] "Client rotation is on, will bootstrap in background" Jul 14 23:31:59.657581 kubelet[1751]: E0714 23:31:59.657560 1751 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://139.178.70.110:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.110:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:31:59.658296 kubelet[1751]: I0714 23:31:59.658277 1751 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 23:31:59.664594 kubelet[1751]: E0714 23:31:59.664560 1751 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 23:31:59.664594 kubelet[1751]: I0714 23:31:59.664582 1751 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 23:31:59.667650 kubelet[1751]: I0714 23:31:59.667637 1751 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 23:31:59.668904 kubelet[1751]: I0714 23:31:59.668883 1751 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 23:31:59.669087 kubelet[1751]: I0714 23:31:59.668952 1751 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 23:31:59.669221 kubelet[1751]: I0714 23:31:59.669212 1751 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 23:31:59.669269 kubelet[1751]: I0714 23:31:59.669261 1751 container_manager_linux.go:304] "Creating device plugin manager" Jul 14 23:31:59.669384 kubelet[1751]: I0714 23:31:59.669377 1751 state_mem.go:36] "Initialized new in-memory state store" Jul 14 23:31:59.674791 kubelet[1751]: I0714 23:31:59.674782 1751 kubelet.go:446] "Attempting to sync node with API server" Jul 14 23:31:59.674854 kubelet[1751]: I0714 23:31:59.674846 1751 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 23:31:59.674909 kubelet[1751]: I0714 23:31:59.674901 1751 kubelet.go:352] "Adding apiserver pod source" Jul 14 23:31:59.674974 kubelet[1751]: I0714 23:31:59.674966 1751 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 23:31:59.752472 kubelet[1751]: W0714 23:31:59.752419 1751 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://139.178.70.110:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 139.178.70.110:6443: connect: connection refused Jul 14 23:31:59.752643 kubelet[1751]: E0714 23:31:59.752613 1751 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://139.178.70.110:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.110:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:31:59.752776 kubelet[1751]: I0714 23:31:59.752764 1751 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 23:31:59.753203 kubelet[1751]: I0714 23:31:59.753191 1751 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 14 23:31:59.755491 kubelet[1751]: W0714 23:31:59.755435 1751 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://139.178.70.110:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 139.178.70.110:6443: connect: connection refused Jul 14 23:31:59.755491 kubelet[1751]: E0714 23:31:59.755474 1751 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://139.178.70.110:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.110:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:31:59.755647 kubelet[1751]: W0714 23:31:59.755635 1751 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 14 23:31:59.757553 kubelet[1751]: I0714 23:31:59.757538 1751 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 14 23:31:59.757666 kubelet[1751]: I0714 23:31:59.757655 1751 server.go:1287] "Started kubelet" Jul 14 23:31:59.758647 kubelet[1751]: I0714 23:31:59.758616 1751 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 23:31:59.758751 kubelet[1751]: I0714 23:31:59.758736 1751 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 14 23:31:59.757000 audit[1751]: AVC avc: denied { mac_admin } for pid=1751 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:59.757000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:31:59.757000 audit[1751]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007eb470 a1=c0009a2588 a2=c0007eb440 a3=25 items=0 ppid=1 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.757000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:31:59.757000 audit[1751]: AVC avc: denied { mac_admin } for pid=1751 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:59.757000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:31:59.757000 audit[1751]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0000f7de0 a1=c0009a25a0 a2=c0007eb500 a3=25 items=0 ppid=1 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.757000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:31:59.759324 kubelet[1751]: I0714 23:31:59.759303 1751 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 23:31:59.760000 audit[1762]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1762 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:59.760000 audit[1762]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe79813c80 a2=0 a3=7ffe79813c6c items=0 ppid=1751 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.760000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 23:31:59.761000 audit[1763]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1763 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:59.761000 audit[1763]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9cec9310 a2=0 a3=7ffd9cec92fc items=0 ppid=1751 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.761000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 23:31:59.764249 kubelet[1751]: E0714 23:31:59.763090 1751 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://139.178.70.110:6443/api/v1/namespaces/default/events\": dial tcp 139.178.70.110:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18524222394416f0 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-14 23:31:59.757629168 +0000 UTC m=+0.534040330,LastTimestamp:2025-07-14 23:31:59.757629168 +0000 UTC m=+0.534040330,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 14 23:31:59.765291 kubelet[1751]: E0714 23:31:59.765270 1751 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 14 23:31:59.765400 kubelet[1751]: I0714 23:31:59.765378 1751 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 23:31:59.766255 kubelet[1751]: I0714 23:31:59.766244 1751 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 14 23:31:59.766340 kubelet[1751]: I0714 23:31:59.766305 1751 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 23:31:59.766551 kubelet[1751]: E0714 23:31:59.766538 1751 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:31:59.766655 kubelet[1751]: I0714 23:31:59.766607 1751 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 23:31:59.766742 kubelet[1751]: I0714 23:31:59.766728 1751 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 23:31:59.766000 audit[1765]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:59.766000 audit[1765]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe1f0d2700 a2=0 a3=7ffe1f0d26ec items=0 ppid=1751 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.766000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 23:31:59.768586 kubelet[1751]: I0714 23:31:59.768574 1751 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 14 23:31:59.768652 kubelet[1751]: I0714 23:31:59.766277 1751 server.go:479] "Adding debug handlers to kubelet server" Jul 14 23:31:59.769235 kubelet[1751]: I0714 23:31:59.769215 1751 reconciler.go:26] "Reconciler: start to sync state" Jul 14 23:31:59.768000 audit[1767]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1767 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:59.768000 audit[1767]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc73d62190 a2=0 a3=7ffc73d6217c items=0 ppid=1751 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.768000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 23:31:59.770195 kubelet[1751]: I0714 23:31:59.770129 1751 factory.go:221] Registration of the systemd container factory successfully Jul 14 23:31:59.770226 kubelet[1751]: I0714 23:31:59.770208 1751 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 23:31:59.770522 kubelet[1751]: E0714 23:31:59.770503 1751 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.110:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.110:6443: connect: connection refused" interval="200ms" Jul 14 23:31:59.771104 kubelet[1751]: I0714 23:31:59.771087 1751 factory.go:221] Registration of the containerd container factory successfully Jul 14 23:31:59.772796 kubelet[1751]: W0714 23:31:59.772764 1751 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://139.178.70.110:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 139.178.70.110:6443: connect: connection refused Jul 14 23:31:59.772860 kubelet[1751]: E0714 23:31:59.772803 1751 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://139.178.70.110:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.110:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:31:59.781000 audit[1771]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:59.781000 audit[1771]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffe0e039dc0 a2=0 a3=7ffe0e039dac items=0 ppid=1751 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.781000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 14 23:31:59.783271 kubelet[1751]: I0714 23:31:59.783242 1751 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 14 23:31:59.782000 audit[1772]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1772 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:31:59.782000 audit[1772]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc1e2c47d0 a2=0 a3=7ffc1e2c47bc items=0 ppid=1751 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.782000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 23:31:59.783967 kubelet[1751]: I0714 23:31:59.783951 1751 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 14 23:31:59.783997 kubelet[1751]: I0714 23:31:59.783970 1751 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 14 23:31:59.783997 kubelet[1751]: I0714 23:31:59.783983 1751 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 14 23:31:59.783997 kubelet[1751]: I0714 23:31:59.783988 1751 kubelet.go:2382] "Starting kubelet main sync loop" Jul 14 23:31:59.784070 kubelet[1751]: E0714 23:31:59.784025 1751 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 23:31:59.783000 audit[1773]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:59.783000 audit[1773]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb90553a0 a2=0 a3=7fffb905538c items=0 ppid=1751 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.783000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 23:31:59.784000 audit[1774]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:59.784000 audit[1774]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffebf438340 a2=0 a3=7ffebf43832c items=0 ppid=1751 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.784000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 23:31:59.785000 audit[1775]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1775 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:31:59.785000 audit[1775]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc5eeaa210 a2=0 a3=7ffc5eeaa1fc items=0 ppid=1751 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.785000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 23:31:59.786000 audit[1776]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1776 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:31:59.786000 audit[1776]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe85e2f040 a2=0 a3=7ffe85e2f02c items=0 ppid=1751 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.786000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 23:31:59.787000 audit[1777]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1777 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:31:59.787000 audit[1777]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffcd93892d0 a2=0 a3=7ffcd93892bc items=0 ppid=1751 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.787000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 23:31:59.787000 audit[1778]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:31:59.787000 audit[1778]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc07a22530 a2=0 a3=7ffc07a2251c items=0 ppid=1751 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.787000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 23:31:59.790938 kubelet[1751]: I0714 23:31:59.790921 1751 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 14 23:31:59.791051 kubelet[1751]: I0714 23:31:59.791041 1751 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 14 23:31:59.791130 kubelet[1751]: I0714 23:31:59.791123 1751 state_mem.go:36] "Initialized new in-memory state store" Jul 14 23:31:59.792215 kubelet[1751]: I0714 23:31:59.792205 1751 policy_none.go:49] "None policy: Start" Jul 14 23:31:59.792297 kubelet[1751]: I0714 23:31:59.792289 1751 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 14 23:31:59.792345 kubelet[1751]: I0714 23:31:59.792338 1751 state_mem.go:35] "Initializing new in-memory state store" Jul 14 23:31:59.794516 kubelet[1751]: W0714 23:31:59.794431 1751 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://139.178.70.110:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 139.178.70.110:6443: connect: connection refused Jul 14 23:31:59.794516 kubelet[1751]: E0714 23:31:59.794457 1751 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://139.178.70.110:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.110:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:31:59.795997 systemd[1]: Created slice kubepods.slice. Jul 14 23:31:59.798870 systemd[1]: Created slice kubepods-burstable.slice. Jul 14 23:31:59.801022 systemd[1]: Created slice kubepods-besteffort.slice. Jul 14 23:31:59.805000 audit[1751]: AVC avc: denied { mac_admin } for pid=1751 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:31:59.805000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:31:59.805000 audit[1751]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000875860 a1=c000d064c8 a2=c000875830 a3=25 items=0 ppid=1 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:31:59.805000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:31:59.809235 kubelet[1751]: I0714 23:31:59.807200 1751 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 14 23:31:59.809235 kubelet[1751]: I0714 23:31:59.807405 1751 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 14 23:31:59.809235 kubelet[1751]: I0714 23:31:59.807497 1751 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 23:31:59.809235 kubelet[1751]: I0714 23:31:59.807505 1751 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 23:31:59.809235 kubelet[1751]: I0714 23:31:59.808784 1751 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 23:31:59.810019 kubelet[1751]: E0714 23:31:59.810007 1751 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 14 23:31:59.810108 kubelet[1751]: E0714 23:31:59.810100 1751 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 14 23:31:59.890017 systemd[1]: Created slice kubepods-burstable-pod8a75e163f27396b2168da0f88f85f8a5.slice. Jul 14 23:31:59.901659 kubelet[1751]: E0714 23:31:59.901638 1751 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:31:59.902855 systemd[1]: Created slice kubepods-burstable-pod6cd0f5be5c7a822be6c1b557339efc53.slice. Jul 14 23:31:59.904058 kubelet[1751]: E0714 23:31:59.904049 1751 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:31:59.905604 systemd[1]: Created slice kubepods-burstable-podd1af03769b64da1b1e8089a7035018fc.slice. Jul 14 23:31:59.906601 kubelet[1751]: E0714 23:31:59.906593 1751 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:31:59.908675 kubelet[1751]: I0714 23:31:59.908667 1751 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 23:31:59.908968 kubelet[1751]: E0714 23:31:59.908956 1751 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.110:6443/api/v1/nodes\": dial tcp 139.178.70.110:6443: connect: connection refused" node="localhost" Jul 14 23:31:59.969595 kubelet[1751]: I0714 23:31:59.969556 1751 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 14 23:31:59.970828 kubelet[1751]: E0714 23:31:59.970814 1751 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.110:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.110:6443: connect: connection refused" interval="400ms" Jul 14 23:32:00.070365 kubelet[1751]: I0714 23:32:00.070328 1751 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:00.070492 kubelet[1751]: I0714 23:32:00.070479 1751 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:00.070588 kubelet[1751]: I0714 23:32:00.070577 1751 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6cd0f5be5c7a822be6c1b557339efc53-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"6cd0f5be5c7a822be6c1b557339efc53\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:32:00.070644 kubelet[1751]: I0714 23:32:00.070635 1751 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6cd0f5be5c7a822be6c1b557339efc53-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"6cd0f5be5c7a822be6c1b557339efc53\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:32:00.070696 kubelet[1751]: I0714 23:32:00.070687 1751 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:00.070747 kubelet[1751]: I0714 23:32:00.070738 1751 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:00.070799 kubelet[1751]: I0714 23:32:00.070790 1751 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6cd0f5be5c7a822be6c1b557339efc53-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"6cd0f5be5c7a822be6c1b557339efc53\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:32:00.070856 kubelet[1751]: I0714 23:32:00.070847 1751 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:00.109847 kubelet[1751]: I0714 23:32:00.109818 1751 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 23:32:00.110122 kubelet[1751]: E0714 23:32:00.110104 1751 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.110:6443/api/v1/nodes\": dial tcp 139.178.70.110:6443: connect: connection refused" node="localhost" Jul 14 23:32:00.203125 env[1252]: time="2025-07-14T23:32:00.202509740Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,}" Jul 14 23:32:00.205037 env[1252]: time="2025-07-14T23:32:00.204993872Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:6cd0f5be5c7a822be6c1b557339efc53,Namespace:kube-system,Attempt:0,}" Jul 14 23:32:00.208027 env[1252]: time="2025-07-14T23:32:00.207804408Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,}" Jul 14 23:32:00.371666 kubelet[1751]: E0714 23:32:00.371642 1751 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.110:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.110:6443: connect: connection refused" interval="800ms" Jul 14 23:32:00.511523 kubelet[1751]: I0714 23:32:00.511450 1751 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 23:32:00.511878 kubelet[1751]: E0714 23:32:00.511842 1751 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.110:6443/api/v1/nodes\": dial tcp 139.178.70.110:6443: connect: connection refused" node="localhost" Jul 14 23:32:00.669920 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount346322023.mount: Deactivated successfully. Jul 14 23:32:00.672447 env[1252]: time="2025-07-14T23:32:00.672421519Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:00.673109 env[1252]: time="2025-07-14T23:32:00.673094859Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:00.674142 env[1252]: time="2025-07-14T23:32:00.674128847Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:00.674671 env[1252]: time="2025-07-14T23:32:00.674656312Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:00.675153 env[1252]: time="2025-07-14T23:32:00.675141128Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:00.677509 env[1252]: time="2025-07-14T23:32:00.677484507Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:00.679712 env[1252]: time="2025-07-14T23:32:00.679687921Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:00.680430 env[1252]: time="2025-07-14T23:32:00.680412853Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:00.681078 env[1252]: time="2025-07-14T23:32:00.681061265Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:00.681513 env[1252]: time="2025-07-14T23:32:00.681501230Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:00.688804 env[1252]: time="2025-07-14T23:32:00.688770130Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:00.689477 env[1252]: time="2025-07-14T23:32:00.689457695Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:00.724010 env[1252]: time="2025-07-14T23:32:00.719508215Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:00.724010 env[1252]: time="2025-07-14T23:32:00.719549099Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:00.724010 env[1252]: time="2025-07-14T23:32:00.719561392Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:00.724010 env[1252]: time="2025-07-14T23:32:00.719678786Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dfaa6ffe8dd334c1fd36bea91b8b713f31ab51ab42a2b905ef19db43b25ee145 pid=1789 runtime=io.containerd.runc.v2 Jul 14 23:32:00.733958 systemd[1]: Started cri-containerd-dfaa6ffe8dd334c1fd36bea91b8b713f31ab51ab42a2b905ef19db43b25ee145.scope. Jul 14 23:32:00.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit: BPF prog-id=55 op=LOAD Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000195c48 a2=10 a3=1c items=0 ppid=1789 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466616136666665386464333334633166643336626561393162386237 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001956b0 a2=3c a3=c items=0 ppid=1789 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466616136666665386464333334633166643336626561393162386237 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit: BPF prog-id=56 op=LOAD Jul 14 23:32:00.747000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001959d8 a2=78 a3=c0002d9ce0 items=0 ppid=1789 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466616136666665386464333334633166643336626561393162386237 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit: BPF prog-id=57 op=LOAD Jul 14 23:32:00.747000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000195770 a2=78 a3=c0002d9d28 items=0 ppid=1789 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466616136666665386464333334633166643336626561393162386237 Jul 14 23:32:00.747000 audit: BPF prog-id=57 op=UNLOAD Jul 14 23:32:00.747000 audit: BPF prog-id=56 op=UNLOAD Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.747000 audit: BPF prog-id=58 op=LOAD Jul 14 23:32:00.747000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000195c30 a2=78 a3=c0003da138 items=0 ppid=1789 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466616136666665386464333334633166643336626561393162386237 Jul 14 23:32:00.762028 env[1252]: time="2025-07-14T23:32:00.761924229Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:00.762287 env[1252]: time="2025-07-14T23:32:00.762135601Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:00.762434 env[1252]: time="2025-07-14T23:32:00.762390586Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:00.762752 env[1252]: time="2025-07-14T23:32:00.762711057Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2cdbd676d57edf9994d8835af859f369ffa80f5f3aded4c01b040827c1730e00 pid=1826 runtime=io.containerd.runc.v2 Jul 14 23:32:00.769145 env[1252]: time="2025-07-14T23:32:00.769060026Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:00.769270 env[1252]: time="2025-07-14T23:32:00.769121693Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:00.769270 env[1252]: time="2025-07-14T23:32:00.769133315Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:00.769959 env[1252]: time="2025-07-14T23:32:00.769280124Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d3fd07958b015f3ce284c107b5ecd1c63f7852c87196ce1c5f12b69eece46ae0 pid=1834 runtime=io.containerd.runc.v2 Jul 14 23:32:00.775882 systemd[1]: Started cri-containerd-2cdbd676d57edf9994d8835af859f369ffa80f5f3aded4c01b040827c1730e00.scope. Jul 14 23:32:00.793137 systemd[1]: Started cri-containerd-d3fd07958b015f3ce284c107b5ecd1c63f7852c87196ce1c5f12b69eece46ae0.scope. Jul 14 23:32:00.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.795000 audit: BPF prog-id=59 op=LOAD Jul 14 23:32:00.796000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.796000 audit[1845]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1826 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646264363736643537656466393939346438383335616638353966 Jul 14 23:32:00.796000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.796000 audit[1845]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1826 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646264363736643537656466393939346438383335616638353966 Jul 14 23:32:00.796000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.796000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.796000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.796000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.796000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.796000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.796000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.796000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.796000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.796000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.796000 audit: BPF prog-id=60 op=LOAD Jul 14 23:32:00.796000 audit[1845]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000343dc0 items=0 ppid=1826 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646264363736643537656466393939346438383335616638353966 Jul 14 23:32:00.797000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.797000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.797000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.797000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.797000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.797000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.797000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.797000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.797000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.797000 audit: BPF prog-id=61 op=LOAD Jul 14 23:32:00.797000 audit[1845]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000343e08 items=0 ppid=1826 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646264363736643537656466393939346438383335616638353966 Jul 14 23:32:00.799972 env[1252]: time="2025-07-14T23:32:00.799942555Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,} returns sandbox id \"dfaa6ffe8dd334c1fd36bea91b8b713f31ab51ab42a2b905ef19db43b25ee145\"" Jul 14 23:32:00.798000 audit: BPF prog-id=61 op=UNLOAD Jul 14 23:32:00.802536 env[1252]: time="2025-07-14T23:32:00.802504205Z" level=info msg="CreateContainer within sandbox \"dfaa6ffe8dd334c1fd36bea91b8b713f31ab51ab42a2b905ef19db43b25ee145\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 14 23:32:00.801000 audit: BPF prog-id=60 op=UNLOAD Jul 14 23:32:00.801000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.801000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.801000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.801000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.801000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.801000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.801000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.801000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.801000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.801000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.801000 audit: BPF prog-id=62 op=LOAD Jul 14 23:32:00.801000 audit[1845]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00040e218 items=0 ppid=1826 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646264363736643537656466393939346438383335616638353966 Jul 14 23:32:00.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.804000 audit: BPF prog-id=63 op=LOAD Jul 14 23:32:00.805000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.805000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1834 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433666430373935386230313566336365323834633130376235656364 Jul 14 23:32:00.805000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.805000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1834 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433666430373935386230313566336365323834633130376235656364 Jul 14 23:32:00.805000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.805000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.805000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.805000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.805000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.805000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.805000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.805000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.805000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.805000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.805000 audit: BPF prog-id=64 op=LOAD Jul 14 23:32:00.805000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024c60 items=0 ppid=1834 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433666430373935386230313566336365323834633130376235656364 Jul 14 23:32:00.806000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.806000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.806000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.806000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.806000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.806000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.806000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.806000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.806000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.806000 audit: BPF prog-id=65 op=LOAD Jul 14 23:32:00.806000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024ca8 items=0 ppid=1834 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433666430373935386230313566336365323834633130376235656364 Jul 14 23:32:00.806000 audit: BPF prog-id=65 op=UNLOAD Jul 14 23:32:00.807000 audit: BPF prog-id=64 op=UNLOAD Jul 14 23:32:00.807000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.807000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.807000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.807000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.807000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.807000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.807000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.807000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.807000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.807000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.807000 audit: BPF prog-id=66 op=LOAD Jul 14 23:32:00.807000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000250b8 items=0 ppid=1834 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433666430373935386230313566336365323834633130376235656364 Jul 14 23:32:00.815251 env[1252]: time="2025-07-14T23:32:00.815225557Z" level=info msg="CreateContainer within sandbox \"dfaa6ffe8dd334c1fd36bea91b8b713f31ab51ab42a2b905ef19db43b25ee145\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"8aff7f7406dcd371c9b75cf58625fa92282216e0d2c1d084da7dffbbaf73d303\"" Jul 14 23:32:00.815798 env[1252]: time="2025-07-14T23:32:00.815783645Z" level=info msg="StartContainer for \"8aff7f7406dcd371c9b75cf58625fa92282216e0d2c1d084da7dffbbaf73d303\"" Jul 14 23:32:00.827000 systemd[1]: Started cri-containerd-8aff7f7406dcd371c9b75cf58625fa92282216e0d2c1d084da7dffbbaf73d303.scope. Jul 14 23:32:00.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.841000 audit: BPF prog-id=67 op=LOAD Jul 14 23:32:00.845000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.845000 audit[1904]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1789 pid=1904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861666637663734303664636433373163396237356366353836323566 Jul 14 23:32:00.845000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.845000 audit[1904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1789 pid=1904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861666637663734303664636433373163396237356366353836323566 Jul 14 23:32:00.846000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.846000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.846000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.846000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.846000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.846000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.846000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.846000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.846000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.846000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.846000 audit: BPF prog-id=68 op=LOAD Jul 14 23:32:00.846000 audit[1904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000383dc0 items=0 ppid=1789 pid=1904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861666637663734303664636433373163396237356366353836323566 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit: BPF prog-id=69 op=LOAD Jul 14 23:32:00.847000 audit[1904]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000383e08 items=0 ppid=1789 pid=1904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861666637663734303664636433373163396237356366353836323566 Jul 14 23:32:00.847000 audit: BPF prog-id=69 op=UNLOAD Jul 14 23:32:00.847000 audit: BPF prog-id=68 op=UNLOAD Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { perfmon } for pid=1904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit[1904]: AVC avc: denied { bpf } for pid=1904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.847000 audit: BPF prog-id=70 op=LOAD Jul 14 23:32:00.847000 audit[1904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003e2218 items=0 ppid=1789 pid=1904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861666637663734303664636433373163396237356366353836323566 Jul 14 23:32:00.849800 env[1252]: time="2025-07-14T23:32:00.849780016Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:6cd0f5be5c7a822be6c1b557339efc53,Namespace:kube-system,Attempt:0,} returns sandbox id \"d3fd07958b015f3ce284c107b5ecd1c63f7852c87196ce1c5f12b69eece46ae0\"" Jul 14 23:32:00.851872 env[1252]: time="2025-07-14T23:32:00.851857848Z" level=info msg="CreateContainer within sandbox \"d3fd07958b015f3ce284c107b5ecd1c63f7852c87196ce1c5f12b69eece46ae0\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 14 23:32:00.858126 kubelet[1751]: W0714 23:32:00.858085 1751 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://139.178.70.110:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 139.178.70.110:6443: connect: connection refused Jul 14 23:32:00.858126 kubelet[1751]: E0714 23:32:00.858113 1751 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://139.178.70.110:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.110:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:32:00.859585 kubelet[1751]: W0714 23:32:00.859533 1751 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://139.178.70.110:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 139.178.70.110:6443: connect: connection refused Jul 14 23:32:00.859585 kubelet[1751]: E0714 23:32:00.859571 1751 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://139.178.70.110:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.110:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:32:00.863929 env[1252]: time="2025-07-14T23:32:00.863909537Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,} returns sandbox id \"2cdbd676d57edf9994d8835af859f369ffa80f5f3aded4c01b040827c1730e00\"" Jul 14 23:32:00.865982 env[1252]: time="2025-07-14T23:32:00.865967430Z" level=info msg="CreateContainer within sandbox \"2cdbd676d57edf9994d8835af859f369ffa80f5f3aded4c01b040827c1730e00\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 14 23:32:00.875513 env[1252]: time="2025-07-14T23:32:00.875495277Z" level=info msg="StartContainer for \"8aff7f7406dcd371c9b75cf58625fa92282216e0d2c1d084da7dffbbaf73d303\" returns successfully" Jul 14 23:32:00.889002 env[1252]: time="2025-07-14T23:32:00.888968637Z" level=info msg="CreateContainer within sandbox \"d3fd07958b015f3ce284c107b5ecd1c63f7852c87196ce1c5f12b69eece46ae0\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"aca5ccdb55a6ca0b3976d231a358f539dc6f8a8dfa282ab1306b5ac682016152\"" Jul 14 23:32:00.889500 env[1252]: time="2025-07-14T23:32:00.889483289Z" level=info msg="StartContainer for \"aca5ccdb55a6ca0b3976d231a358f539dc6f8a8dfa282ab1306b5ac682016152\"" Jul 14 23:32:00.895902 env[1252]: time="2025-07-14T23:32:00.895838011Z" level=info msg="CreateContainer within sandbox \"2cdbd676d57edf9994d8835af859f369ffa80f5f3aded4c01b040827c1730e00\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"1bcceae077a46e87d884e438151c0957154ec84ac32c6d4dd5b56bf75186d4ac\"" Jul 14 23:32:00.896270 env[1252]: time="2025-07-14T23:32:00.896253646Z" level=info msg="StartContainer for \"1bcceae077a46e87d884e438151c0957154ec84ac32c6d4dd5b56bf75186d4ac\"" Jul 14 23:32:00.902557 systemd[1]: Started cri-containerd-aca5ccdb55a6ca0b3976d231a358f539dc6f8a8dfa282ab1306b5ac682016152.scope. Jul 14 23:32:00.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit: BPF prog-id=71 op=LOAD Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1834 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163613563636462353561366361306233393736643233316133353866 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1834 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163613563636462353561366361306233393736643233316133353866 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit: BPF prog-id=72 op=LOAD Jul 14 23:32:00.912000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c6910 items=0 ppid=1834 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163613563636462353561366361306233393736643233316133353866 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit: BPF prog-id=73 op=LOAD Jul 14 23:32:00.912000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c6958 items=0 ppid=1834 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163613563636462353561366361306233393736643233316133353866 Jul 14 23:32:00.912000 audit: BPF prog-id=73 op=UNLOAD Jul 14 23:32:00.912000 audit: BPF prog-id=72 op=UNLOAD Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.912000 audit: BPF prog-id=74 op=LOAD Jul 14 23:32:00.912000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c6d68 items=0 ppid=1834 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163613563636462353561366361306233393736643233316133353866 Jul 14 23:32:00.926798 systemd[1]: Started cri-containerd-1bcceae077a46e87d884e438151c0957154ec84ac32c6d4dd5b56bf75186d4ac.scope. Jul 14 23:32:00.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.938000 audit: BPF prog-id=75 op=LOAD Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1826 pid=1972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162636365616530373761343665383764383834653433383135316330 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=1826 pid=1972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162636365616530373761343665383764383834653433383135316330 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit: BPF prog-id=76 op=LOAD Jul 14 23:32:00.939000 audit[1972]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000213670 items=0 ppid=1826 pid=1972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162636365616530373761343665383764383834653433383135316330 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit: BPF prog-id=77 op=LOAD Jul 14 23:32:00.939000 audit[1972]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0002136b8 items=0 ppid=1826 pid=1972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162636365616530373761343665383764383834653433383135316330 Jul 14 23:32:00.939000 audit: BPF prog-id=77 op=UNLOAD Jul 14 23:32:00.939000 audit: BPF prog-id=76 op=UNLOAD Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { perfmon } for pid=1972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit[1972]: AVC avc: denied { bpf } for pid=1972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:00.939000 audit: BPF prog-id=78 op=LOAD Jul 14 23:32:00.939000 audit[1972]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000213ac8 items=0 ppid=1826 pid=1972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:00.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162636365616530373761343665383764383834653433383135316330 Jul 14 23:32:00.942726 env[1252]: time="2025-07-14T23:32:00.942689670Z" level=info msg="StartContainer for \"aca5ccdb55a6ca0b3976d231a358f539dc6f8a8dfa282ab1306b5ac682016152\" returns successfully" Jul 14 23:32:00.970260 env[1252]: time="2025-07-14T23:32:00.970234942Z" level=info msg="StartContainer for \"1bcceae077a46e87d884e438151c0957154ec84ac32c6d4dd5b56bf75186d4ac\" returns successfully" Jul 14 23:32:01.030175 kubelet[1751]: W0714 23:32:01.030152 1751 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://139.178.70.110:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 139.178.70.110:6443: connect: connection refused Jul 14 23:32:01.030268 kubelet[1751]: E0714 23:32:01.030182 1751 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://139.178.70.110:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.110:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:32:01.038431 sshd[1658]: Failed password for root from 222.172.32.246 port 4758 ssh2 Jul 14 23:32:01.172744 kubelet[1751]: E0714 23:32:01.172716 1751 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.110:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.110:6443: connect: connection refused" interval="1.6s" Jul 14 23:32:01.234397 kubelet[1751]: W0714 23:32:01.234309 1751 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://139.178.70.110:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 139.178.70.110:6443: connect: connection refused Jul 14 23:32:01.234397 kubelet[1751]: E0714 23:32:01.234374 1751 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://139.178.70.110:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.110:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:32:01.294546 sshd[1658]: Received disconnect from 222.172.32.246 port 4758:11: Bye Bye [preauth] Jul 14 23:32:01.294546 sshd[1658]: Disconnected from authenticating user root 222.172.32.246 port 4758 [preauth] Jul 14 23:32:01.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.110:22-222.172.32.246:4758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:32:01.295292 systemd[1]: sshd@8-139.178.70.110:22-222.172.32.246:4758.service: Deactivated successfully. Jul 14 23:32:01.313152 kubelet[1751]: I0714 23:32:01.312942 1751 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 23:32:01.313152 kubelet[1751]: E0714 23:32:01.313128 1751 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.110:6443/api/v1/nodes\": dial tcp 139.178.70.110:6443: connect: connection refused" node="localhost" Jul 14 23:32:01.665029 systemd[1]: run-containerd-runc-k8s.io-dfaa6ffe8dd334c1fd36bea91b8b713f31ab51ab42a2b905ef19db43b25ee145-runc.fLBGpq.mount: Deactivated successfully. Jul 14 23:32:01.741518 kubelet[1751]: E0714 23:32:01.741489 1751 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://139.178.70.110:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.110:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:32:01.797649 kubelet[1751]: E0714 23:32:01.797631 1751 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:32:01.798956 kubelet[1751]: E0714 23:32:01.798945 1751 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:32:01.800087 kubelet[1751]: E0714 23:32:01.800072 1751 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:32:02.065000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:02.071128 kernel: kauditd_printk_skb: 560 callbacks suppressed Jul 14 23:32:02.071205 kernel: audit: type=1400 audit(1752535922.065:554): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:02.065000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000e52030 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:32:02.076218 kernel: audit: type=1300 audit(1752535922.065:554): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000e52030 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:32:02.065000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:32:02.080022 kernel: audit: type=1327 audit(1752535922.065:554): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:32:02.065000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:02.083155 kernel: audit: type=1400 audit(1752535922.065:555): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:02.065000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003cc1e0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:32:02.065000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:32:02.092286 kernel: audit: type=1300 audit(1752535922.065:555): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003cc1e0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:32:02.092363 kernel: audit: type=1327 audit(1752535922.065:555): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:32:02.802102 kubelet[1751]: E0714 23:32:02.802081 1751 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:32:02.802435 kubelet[1751]: E0714 23:32:02.802262 1751 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:32:02.914510 kubelet[1751]: I0714 23:32:02.914144 1751 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 23:32:03.040467 kubelet[1751]: E0714 23:32:03.040447 1751 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:32:03.194000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:03.194000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c005a34510 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:32:03.202687 kernel: audit: type=1400 audit(1752535923.194:556): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:03.202733 kernel: audit: type=1300 audit(1752535923.194:556): arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c005a34510 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:32:03.202751 kernel: audit: type=1327 audit(1752535923.194:556): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:32:03.194000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:32:03.202000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:03.209097 kernel: audit: type=1400 audit(1752535923.202:557): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:03.202000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c006a9d680 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:32:03.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:32:03.202000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:03.202000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0033d65a0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:32:03.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:32:03.212000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:03.212000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c006a9d890 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:32:03.212000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:32:03.258000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:03.258000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c0047efe20 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:32:03.258000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:32:03.258000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:03.258000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c0036d9020 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:32:03.258000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:32:03.325650 kubelet[1751]: E0714 23:32:03.325623 1751 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 14 23:32:03.409258 kubelet[1751]: I0714 23:32:03.409232 1751 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 14 23:32:03.409454 kubelet[1751]: E0714 23:32:03.409440 1751 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 14 23:32:03.419663 kubelet[1751]: E0714 23:32:03.419633 1751 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:32:03.520430 kubelet[1751]: E0714 23:32:03.520337 1751 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:32:03.621164 kubelet[1751]: E0714 23:32:03.621133 1751 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:32:03.721731 kubelet[1751]: E0714 23:32:03.721690 1751 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:32:03.803691 kubelet[1751]: E0714 23:32:03.803658 1751 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:32:03.803976 kubelet[1751]: E0714 23:32:03.803926 1751 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:32:03.822469 kubelet[1751]: E0714 23:32:03.822449 1751 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:32:03.867513 kubelet[1751]: I0714 23:32:03.867474 1751 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:03.871224 kubelet[1751]: E0714 23:32:03.871202 1751 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:03.871347 kubelet[1751]: I0714 23:32:03.871337 1751 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 23:32:03.872671 kubelet[1751]: E0714 23:32:03.872658 1751 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 14 23:32:03.872744 kubelet[1751]: I0714 23:32:03.872736 1751 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 23:32:03.873939 kubelet[1751]: E0714 23:32:03.873925 1751 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 14 23:32:04.720073 kubelet[1751]: I0714 23:32:04.720049 1751 apiserver.go:52] "Watching apiserver" Jul 14 23:32:04.769084 kubelet[1751]: I0714 23:32:04.769030 1751 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 14 23:32:05.393530 systemd[1]: Reloading. Jul 14 23:32:05.456150 /usr/lib/systemd/system-generators/torcx-generator[2044]: time="2025-07-14T23:32:05Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 23:32:05.456486 /usr/lib/systemd/system-generators/torcx-generator[2044]: time="2025-07-14T23:32:05Z" level=info msg="torcx already run" Jul 14 23:32:05.512506 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 23:32:05.512520 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 23:32:05.524196 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit: BPF prog-id=79 op=LOAD Jul 14 23:32:05.574000 audit: BPF prog-id=71 op=UNLOAD Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.574000 audit: BPF prog-id=80 op=LOAD Jul 14 23:32:05.574000 audit: BPF prog-id=59 op=UNLOAD Jul 14 23:32:05.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.575000 audit: BPF prog-id=81 op=LOAD Jul 14 23:32:05.575000 audit: BPF prog-id=63 op=UNLOAD Jul 14 23:32:05.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit: BPF prog-id=82 op=LOAD Jul 14 23:32:05.576000 audit: BPF prog-id=45 op=UNLOAD Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit: BPF prog-id=83 op=LOAD Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit: BPF prog-id=84 op=LOAD Jul 14 23:32:05.576000 audit: BPF prog-id=46 op=UNLOAD Jul 14 23:32:05.576000 audit: BPF prog-id=47 op=UNLOAD Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.577000 audit: BPF prog-id=85 op=LOAD Jul 14 23:32:05.577000 audit: BPF prog-id=48 op=UNLOAD Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit: BPF prog-id=86 op=LOAD Jul 14 23:32:05.579000 audit: BPF prog-id=67 op=UNLOAD Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.579000 audit: BPF prog-id=87 op=LOAD Jul 14 23:32:05.580000 audit: BPF prog-id=40 op=UNLOAD Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit: BPF prog-id=88 op=LOAD Jul 14 23:32:05.580000 audit: BPF prog-id=49 op=UNLOAD Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit: BPF prog-id=89 op=LOAD Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit: BPF prog-id=90 op=LOAD Jul 14 23:32:05.580000 audit: BPF prog-id=50 op=UNLOAD Jul 14 23:32:05.580000 audit: BPF prog-id=51 op=UNLOAD Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit: BPF prog-id=91 op=LOAD Jul 14 23:32:05.580000 audit: BPF prog-id=52 op=UNLOAD Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit: BPF prog-id=92 op=LOAD Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit: BPF prog-id=93 op=LOAD Jul 14 23:32:05.581000 audit: BPF prog-id=53 op=UNLOAD Jul 14 23:32:05.581000 audit: BPF prog-id=54 op=UNLOAD Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.581000 audit: BPF prog-id=94 op=LOAD Jul 14 23:32:05.581000 audit: BPF prog-id=44 op=UNLOAD Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit: BPF prog-id=95 op=LOAD Jul 14 23:32:05.582000 audit: BPF prog-id=41 op=UNLOAD Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit: BPF prog-id=96 op=LOAD Jul 14 23:32:05.582000 audit: BPF prog-id=75 op=UNLOAD Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit: BPF prog-id=97 op=LOAD Jul 14 23:32:05.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.583000 audit: BPF prog-id=98 op=LOAD Jul 14 23:32:05.583000 audit: BPF prog-id=42 op=UNLOAD Jul 14 23:32:05.583000 audit: BPF prog-id=43 op=UNLOAD Jul 14 23:32:05.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:05.584000 audit: BPF prog-id=99 op=LOAD Jul 14 23:32:05.584000 audit: BPF prog-id=55 op=UNLOAD Jul 14 23:32:05.596983 kubelet[1751]: I0714 23:32:05.596860 1751 dynamic_cafile_content.go:175] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 23:32:05.598457 systemd[1]: Stopping kubelet.service... Jul 14 23:32:05.609692 systemd[1]: kubelet.service: Deactivated successfully. Jul 14 23:32:05.609848 systemd[1]: Stopped kubelet.service. Jul 14 23:32:05.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:32:05.611693 systemd[1]: Starting kubelet.service... Jul 14 23:32:06.258000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 14 23:32:06.258000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009cc5c0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:32:06.258000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:32:07.773374 kernel: kauditd_printk_skb: 262 callbacks suppressed Jul 14 23:32:07.773457 kernel: audit: type=1400 audit(1752535927.768:808): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:07.768000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:07.769000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:07.769000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e004a0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:32:07.784810 kernel: audit: type=1400 audit(1752535927.769:809): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:07.784853 kernel: audit: type=1300 audit(1752535927.769:809): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e004a0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:32:07.769000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:32:07.769000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:07.793008 kernel: audit: type=1327 audit(1752535927.769:809): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:32:07.793038 kernel: audit: type=1400 audit(1752535927.769:810): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:07.793054 kernel: audit: type=1300 audit(1752535927.769:810): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e00500 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:32:07.769000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e00500 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:32:07.769000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:32:07.801629 kernel: audit: type=1327 audit(1752535927.769:810): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:32:07.801661 kernel: audit: type=1400 audit(1752535927.769:811): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:07.769000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:32:07.769000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e00560 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:32:07.808862 kernel: audit: type=1300 audit(1752535927.769:811): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e00560 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:32:07.808890 kernel: audit: type=1327 audit(1752535927.769:811): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:32:07.769000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:32:07.768000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00095ee60 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:32:07.768000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:32:08.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:32:08.109192 systemd[1]: Started kubelet.service. Jul 14 23:32:08.155023 kubelet[2107]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 23:32:08.155324 kubelet[2107]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 14 23:32:08.155382 kubelet[2107]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 23:32:08.155524 kubelet[2107]: I0714 23:32:08.155492 2107 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 23:32:08.163208 kubelet[2107]: I0714 23:32:08.163188 2107 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 14 23:32:08.163324 kubelet[2107]: I0714 23:32:08.163314 2107 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 23:32:08.163569 kubelet[2107]: I0714 23:32:08.163559 2107 server.go:954] "Client rotation is on, will bootstrap in background" Jul 14 23:32:08.170969 kubelet[2107]: I0714 23:32:08.170952 2107 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 14 23:32:08.280693 kubelet[2107]: I0714 23:32:08.280667 2107 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 23:32:08.282233 kubelet[2107]: E0714 23:32:08.282207 2107 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 23:32:08.282328 kubelet[2107]: I0714 23:32:08.282316 2107 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 23:32:08.285333 kubelet[2107]: I0714 23:32:08.285312 2107 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 23:32:08.285504 kubelet[2107]: I0714 23:32:08.285474 2107 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 23:32:08.285655 kubelet[2107]: I0714 23:32:08.285508 2107 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 23:32:08.285655 kubelet[2107]: I0714 23:32:08.285639 2107 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 23:32:08.285655 kubelet[2107]: I0714 23:32:08.285653 2107 container_manager_linux.go:304] "Creating device plugin manager" Jul 14 23:32:08.285860 kubelet[2107]: I0714 23:32:08.285690 2107 state_mem.go:36] "Initialized new in-memory state store" Jul 14 23:32:08.285860 kubelet[2107]: I0714 23:32:08.285814 2107 kubelet.go:446] "Attempting to sync node with API server" Jul 14 23:32:08.285860 kubelet[2107]: I0714 23:32:08.285827 2107 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 23:32:08.285860 kubelet[2107]: I0714 23:32:08.285840 2107 kubelet.go:352] "Adding apiserver pod source" Jul 14 23:32:08.285860 kubelet[2107]: I0714 23:32:08.285848 2107 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 23:32:08.292106 kubelet[2107]: I0714 23:32:08.288635 2107 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 23:32:08.292106 kubelet[2107]: I0714 23:32:08.288935 2107 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 14 23:32:08.292106 kubelet[2107]: I0714 23:32:08.289222 2107 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 14 23:32:08.292106 kubelet[2107]: I0714 23:32:08.289243 2107 server.go:1287] "Started kubelet" Jul 14 23:32:08.306000 audit[2107]: AVC avc: denied { mac_admin } for pid=2107 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:08.306000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:32:08.306000 audit[2107]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000855ef0 a1=c0008371e8 a2=c000855ec0 a3=25 items=0 ppid=1 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:08.306000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:32:08.306000 audit[2107]: AVC avc: denied { mac_admin } for pid=2107 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:08.306000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:32:08.306000 audit[2107]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000937660 a1=c000837200 a2=c000855f80 a3=25 items=0 ppid=1 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:08.306000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:32:08.308190 kubelet[2107]: I0714 23:32:08.307543 2107 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 23:32:08.308190 kubelet[2107]: I0714 23:32:08.307596 2107 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 14 23:32:08.308190 kubelet[2107]: I0714 23:32:08.307629 2107 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 23:32:08.314618 kubelet[2107]: I0714 23:32:08.314581 2107 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 23:32:08.315330 kubelet[2107]: I0714 23:32:08.315309 2107 server.go:479] "Adding debug handlers to kubelet server" Jul 14 23:32:08.316197 kubelet[2107]: I0714 23:32:08.316164 2107 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 23:32:08.316314 kubelet[2107]: I0714 23:32:08.316301 2107 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 23:32:08.316513 kubelet[2107]: I0714 23:32:08.316487 2107 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 23:32:08.319540 kubelet[2107]: I0714 23:32:08.318794 2107 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 14 23:32:08.319540 kubelet[2107]: E0714 23:32:08.318965 2107 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:32:08.320888 kubelet[2107]: I0714 23:32:08.320527 2107 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 14 23:32:08.320888 kubelet[2107]: I0714 23:32:08.320607 2107 reconciler.go:26] "Reconciler: start to sync state" Jul 14 23:32:08.322822 kubelet[2107]: I0714 23:32:08.322251 2107 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 14 23:32:08.323042 kubelet[2107]: I0714 23:32:08.323025 2107 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 14 23:32:08.323084 kubelet[2107]: I0714 23:32:08.323055 2107 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 14 23:32:08.323084 kubelet[2107]: I0714 23:32:08.323071 2107 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 14 23:32:08.323084 kubelet[2107]: I0714 23:32:08.323076 2107 kubelet.go:2382] "Starting kubelet main sync loop" Jul 14 23:32:08.323147 kubelet[2107]: E0714 23:32:08.323100 2107 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 23:32:08.345823 kubelet[2107]: I0714 23:32:08.342710 2107 factory.go:221] Registration of the containerd container factory successfully Jul 14 23:32:08.345823 kubelet[2107]: I0714 23:32:08.342723 2107 factory.go:221] Registration of the systemd container factory successfully Jul 14 23:32:08.345823 kubelet[2107]: I0714 23:32:08.342781 2107 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 23:32:08.423584 kubelet[2107]: E0714 23:32:08.423519 2107 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 14 23:32:08.442477 kubelet[2107]: I0714 23:32:08.442463 2107 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 14 23:32:08.442578 kubelet[2107]: I0714 23:32:08.442569 2107 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 14 23:32:08.442633 kubelet[2107]: I0714 23:32:08.442626 2107 state_mem.go:36] "Initialized new in-memory state store" Jul 14 23:32:08.442774 kubelet[2107]: I0714 23:32:08.442765 2107 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 14 23:32:08.442829 kubelet[2107]: I0714 23:32:08.442813 2107 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 14 23:32:08.442875 kubelet[2107]: I0714 23:32:08.442868 2107 policy_none.go:49] "None policy: Start" Jul 14 23:32:08.442937 kubelet[2107]: I0714 23:32:08.442918 2107 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 14 23:32:08.442986 kubelet[2107]: I0714 23:32:08.442979 2107 state_mem.go:35] "Initializing new in-memory state store" Jul 14 23:32:08.443092 kubelet[2107]: I0714 23:32:08.443085 2107 state_mem.go:75] "Updated machine memory state" Jul 14 23:32:08.445127 kubelet[2107]: I0714 23:32:08.445118 2107 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 14 23:32:08.443000 audit[2107]: AVC avc: denied { mac_admin } for pid=2107 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:08.443000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:32:08.443000 audit[2107]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00107cc90 a1=c00106d128 a2=c00107cc60 a3=25 items=0 ppid=1 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:08.443000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:32:08.445603 kubelet[2107]: I0714 23:32:08.445592 2107 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 14 23:32:08.446982 kubelet[2107]: I0714 23:32:08.446974 2107 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 23:32:08.447058 kubelet[2107]: I0714 23:32:08.447041 2107 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 23:32:08.447279 kubelet[2107]: I0714 23:32:08.447271 2107 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 23:32:08.448081 kubelet[2107]: E0714 23:32:08.448072 2107 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 14 23:32:08.550633 kubelet[2107]: I0714 23:32:08.550600 2107 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 23:32:08.577144 kubelet[2107]: I0714 23:32:08.577109 2107 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 14 23:32:08.577253 kubelet[2107]: I0714 23:32:08.577179 2107 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 14 23:32:08.625080 kubelet[2107]: I0714 23:32:08.625049 2107 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 23:32:08.665374 kubelet[2107]: I0714 23:32:08.665344 2107 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:08.665573 kubelet[2107]: I0714 23:32:08.665344 2107 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 23:32:08.722518 kubelet[2107]: I0714 23:32:08.722438 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6cd0f5be5c7a822be6c1b557339efc53-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"6cd0f5be5c7a822be6c1b557339efc53\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:32:08.722518 kubelet[2107]: I0714 23:32:08.722471 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6cd0f5be5c7a822be6c1b557339efc53-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"6cd0f5be5c7a822be6c1b557339efc53\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:32:08.722518 kubelet[2107]: I0714 23:32:08.722489 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:08.722518 kubelet[2107]: I0714 23:32:08.722501 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:08.722706 kubelet[2107]: I0714 23:32:08.722521 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:08.722706 kubelet[2107]: I0714 23:32:08.722533 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:08.722706 kubelet[2107]: I0714 23:32:08.722546 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6cd0f5be5c7a822be6c1b557339efc53-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"6cd0f5be5c7a822be6c1b557339efc53\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:32:08.722706 kubelet[2107]: I0714 23:32:08.722558 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:32:08.722706 kubelet[2107]: I0714 23:32:08.722571 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 14 23:32:09.287052 kubelet[2107]: I0714 23:32:09.287029 2107 apiserver.go:52] "Watching apiserver" Jul 14 23:32:09.321361 kubelet[2107]: I0714 23:32:09.321331 2107 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 14 23:32:09.332107 kubelet[2107]: I0714 23:32:09.332068 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.332053911 podStartE2EDuration="1.332053911s" podCreationTimestamp="2025-07-14 23:32:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:32:09.33194614 +0000 UTC m=+1.213876944" watchObservedRunningTime="2025-07-14 23:32:09.332053911 +0000 UTC m=+1.213984707" Jul 14 23:32:09.332341 kubelet[2107]: I0714 23:32:09.332318 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.332310916 podStartE2EDuration="1.332310916s" podCreationTimestamp="2025-07-14 23:32:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:32:09.324345234 +0000 UTC m=+1.206276034" watchObservedRunningTime="2025-07-14 23:32:09.332310916 +0000 UTC m=+1.214241719" Jul 14 23:32:09.424258 kubelet[2107]: I0714 23:32:09.424238 2107 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 23:32:09.446621 kubelet[2107]: E0714 23:32:09.446600 2107 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 14 23:32:09.446968 kubelet[2107]: I0714 23:32:09.446930 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.446921167 podStartE2EDuration="1.446921167s" podCreationTimestamp="2025-07-14 23:32:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:32:09.338014462 +0000 UTC m=+1.219945256" watchObservedRunningTime="2025-07-14 23:32:09.446921167 +0000 UTC m=+1.328851965" Jul 14 23:32:10.927922 kubelet[2107]: I0714 23:32:10.927897 2107 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 14 23:32:10.928334 env[1252]: time="2025-07-14T23:32:10.928278039Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 14 23:32:10.928514 kubelet[2107]: I0714 23:32:10.928393 2107 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 14 23:32:11.387395 systemd[1]: Created slice kubepods-besteffort-podb2ac0fdd_8189_439d_b9d8_493ac69c3abf.slice. Jul 14 23:32:11.438861 kubelet[2107]: I0714 23:32:11.438841 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b2ac0fdd-8189-439d-b9d8-493ac69c3abf-xtables-lock\") pod \"kube-proxy-f5bzb\" (UID: \"b2ac0fdd-8189-439d-b9d8-493ac69c3abf\") " pod="kube-system/kube-proxy-f5bzb" Jul 14 23:32:11.438988 kubelet[2107]: I0714 23:32:11.438977 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pktjk\" (UniqueName: \"kubernetes.io/projected/b2ac0fdd-8189-439d-b9d8-493ac69c3abf-kube-api-access-pktjk\") pod \"kube-proxy-f5bzb\" (UID: \"b2ac0fdd-8189-439d-b9d8-493ac69c3abf\") " pod="kube-system/kube-proxy-f5bzb" Jul 14 23:32:11.439049 kubelet[2107]: I0714 23:32:11.439038 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/b2ac0fdd-8189-439d-b9d8-493ac69c3abf-kube-proxy\") pod \"kube-proxy-f5bzb\" (UID: \"b2ac0fdd-8189-439d-b9d8-493ac69c3abf\") " pod="kube-system/kube-proxy-f5bzb" Jul 14 23:32:11.439111 kubelet[2107]: I0714 23:32:11.439102 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b2ac0fdd-8189-439d-b9d8-493ac69c3abf-lib-modules\") pod \"kube-proxy-f5bzb\" (UID: \"b2ac0fdd-8189-439d-b9d8-493ac69c3abf\") " pod="kube-system/kube-proxy-f5bzb" Jul 14 23:32:11.543361 kubelet[2107]: I0714 23:32:11.543322 2107 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 14 23:32:11.696064 env[1252]: time="2025-07-14T23:32:11.695986520Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-f5bzb,Uid:b2ac0fdd-8189-439d-b9d8-493ac69c3abf,Namespace:kube-system,Attempt:0,}" Jul 14 23:32:11.705879 env[1252]: time="2025-07-14T23:32:11.705825224Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:11.705879 env[1252]: time="2025-07-14T23:32:11.705856709Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:11.706060 env[1252]: time="2025-07-14T23:32:11.705866885Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:11.706188 env[1252]: time="2025-07-14T23:32:11.706154990Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/74e51983695927b96d35aa1b516a4d2ae29903826bb3afc396ca75c520ed62b6 pid=2151 runtime=io.containerd.runc.v2 Jul 14 23:32:11.734084 systemd[1]: Started cri-containerd-74e51983695927b96d35aa1b516a4d2ae29903826bb3afc396ca75c520ed62b6.scope. Jul 14 23:32:11.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.739000 audit: BPF prog-id=100 op=LOAD Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2151 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:11.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734653531393833363935393237623936643335616131623531366134 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2151 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:11.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734653531393833363935393237623936643335616131623531366134 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit: BPF prog-id=101 op=LOAD Jul 14 23:32:11.740000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00026e9a0 items=0 ppid=2151 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:11.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734653531393833363935393237623936643335616131623531366134 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.740000 audit: BPF prog-id=102 op=LOAD Jul 14 23:32:11.740000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00026e9e8 items=0 ppid=2151 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:11.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734653531393833363935393237623936643335616131623531366134 Jul 14 23:32:11.741000 audit: BPF prog-id=102 op=UNLOAD Jul 14 23:32:11.741000 audit: BPF prog-id=101 op=UNLOAD Jul 14 23:32:11.741000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.741000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.741000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.741000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.741000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.741000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.741000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.741000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.741000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.741000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.741000 audit: BPF prog-id=103 op=LOAD Jul 14 23:32:11.741000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00026edf8 items=0 ppid=2151 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:11.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734653531393833363935393237623936643335616131623531366134 Jul 14 23:32:11.754239 env[1252]: time="2025-07-14T23:32:11.754212912Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-f5bzb,Uid:b2ac0fdd-8189-439d-b9d8-493ac69c3abf,Namespace:kube-system,Attempt:0,} returns sandbox id \"74e51983695927b96d35aa1b516a4d2ae29903826bb3afc396ca75c520ed62b6\"" Jul 14 23:32:11.756608 env[1252]: time="2025-07-14T23:32:11.756587722Z" level=info msg="CreateContainer within sandbox \"74e51983695927b96d35aa1b516a4d2ae29903826bb3afc396ca75c520ed62b6\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 14 23:32:11.818554 env[1252]: time="2025-07-14T23:32:11.818442821Z" level=info msg="CreateContainer within sandbox \"74e51983695927b96d35aa1b516a4d2ae29903826bb3afc396ca75c520ed62b6\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"d7cf05748ba6de49307f1ca570c93d3f7e69fccbf7f65396a429a15aa580a1aa\"" Jul 14 23:32:11.818940 env[1252]: time="2025-07-14T23:32:11.818918972Z" level=info msg="StartContainer for \"d7cf05748ba6de49307f1ca570c93d3f7e69fccbf7f65396a429a15aa580a1aa\"" Jul 14 23:32:11.833314 systemd[1]: Started cri-containerd-d7cf05748ba6de49307f1ca570c93d3f7e69fccbf7f65396a429a15aa580a1aa.scope. Jul 14 23:32:11.873000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.873000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f2ded0090a8 items=0 ppid=2151 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:11.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437636630353734386261366465343933303766316361353730633933 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit: BPF prog-id=104 op=LOAD Jul 14 23:32:11.874000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0001f8be8 items=0 ppid=2151 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:11.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437636630353734386261366465343933303766316361353730633933 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit: BPF prog-id=105 op=LOAD Jul 14 23:32:11.874000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0001f8c38 items=0 ppid=2151 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:11.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437636630353734386261366465343933303766316361353730633933 Jul 14 23:32:11.874000 audit: BPF prog-id=105 op=UNLOAD Jul 14 23:32:11.874000 audit: BPF prog-id=104 op=UNLOAD Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:11.874000 audit: BPF prog-id=106 op=LOAD Jul 14 23:32:11.874000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0001f8cc8 items=0 ppid=2151 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:11.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437636630353734386261366465343933303766316361353730633933 Jul 14 23:32:11.894261 env[1252]: time="2025-07-14T23:32:11.894230235Z" level=info msg="StartContainer for \"d7cf05748ba6de49307f1ca570c93d3f7e69fccbf7f65396a429a15aa580a1aa\" returns successfully" Jul 14 23:32:12.549980 systemd[1]: run-containerd-runc-k8s.io-74e51983695927b96d35aa1b516a4d2ae29903826bb3afc396ca75c520ed62b6-runc.T3171A.mount: Deactivated successfully. Jul 14 23:32:12.945000 audit[2252]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:12.949858 kernel: kauditd_printk_skb: 115 callbacks suppressed Jul 14 23:32:12.949924 kernel: audit: type=1325 audit(1752535932.945:840): table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:12.945000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee0cf22b0 a2=0 a3=7ffee0cf229c items=0 ppid=2203 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:12.954063 kernel: audit: type=1300 audit(1752535932.945:840): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee0cf22b0 a2=0 a3=7ffee0cf229c items=0 ppid=2203 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:12.954107 kernel: audit: type=1327 audit(1752535932.945:840): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 23:32:12.945000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 23:32:12.946000 audit[2254]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:12.957772 kernel: audit: type=1325 audit(1752535932.946:841): table=nat:39 family=2 entries=1 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:12.946000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe8adcdb70 a2=0 a3=7ffe8adcdb5c items=0 ppid=2203 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:12.961605 kernel: audit: type=1300 audit(1752535932.946:841): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe8adcdb70 a2=0 a3=7ffe8adcdb5c items=0 ppid=2203 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:12.961648 kernel: audit: type=1327 audit(1752535932.946:841): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 23:32:12.946000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 23:32:12.947000 audit[2255]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:12.965488 kernel: audit: type=1325 audit(1752535932.947:842): table=filter:40 family=2 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:12.947000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffff535e440 a2=0 a3=7ffff535e42c items=0 ppid=2203 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:12.969765 kernel: audit: type=1300 audit(1752535932.947:842): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffff535e440 a2=0 a3=7ffff535e42c items=0 ppid=2203 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:12.969807 kernel: audit: type=1327 audit(1752535932.947:842): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 23:32:12.947000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 23:32:12.953000 audit[2253]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:12.973393 kernel: audit: type=1325 audit(1752535932.953:843): table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:12.953000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcaf094fb0 a2=0 a3=7ffcaf094f9c items=0 ppid=2203 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:12.953000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 23:32:12.955000 audit[2256]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:12.955000 audit[2256]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffced3871a0 a2=0 a3=7ffced38718c items=0 ppid=2203 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:12.955000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 23:32:12.956000 audit[2257]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:12.956000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe226d9120 a2=0 a3=7ffe226d910c items=0 ppid=2203 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:12.956000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 23:32:13.062000 audit[2258]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.062000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffeb6399300 a2=0 a3=7ffeb63992ec items=0 ppid=2203 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.062000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 23:32:13.067000 audit[2260]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.067000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe7f8976d0 a2=0 a3=7ffe7f8976bc items=0 ppid=2203 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.067000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 14 23:32:13.070000 audit[2263]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.070000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe07ca1670 a2=0 a3=7ffe07ca165c items=0 ppid=2203 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.070000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 14 23:32:13.071000 audit[2264]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.071000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc1bb3d980 a2=0 a3=7ffc1bb3d96c items=0 ppid=2203 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.071000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 23:32:13.074000 audit[2266]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.074000 audit[2266]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd88a58be0 a2=0 a3=7ffd88a58bcc items=0 ppid=2203 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.074000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 23:32:13.075000 audit[2267]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.075000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc816bb060 a2=0 a3=7ffc816bb04c items=0 ppid=2203 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.075000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 23:32:13.077000 audit[2269]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.077000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc15d19220 a2=0 a3=7ffc15d1920c items=0 ppid=2203 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.077000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 23:32:13.083000 audit[2272]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.083000 audit[2272]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff28b8d070 a2=0 a3=7fff28b8d05c items=0 ppid=2203 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.083000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 14 23:32:13.084000 audit[2273]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2273 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.084000 audit[2273]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff26ab7d90 a2=0 a3=7fff26ab7d7c items=0 ppid=2203 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.084000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 23:32:13.086000 audit[2275]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.086000 audit[2275]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd89ba6150 a2=0 a3=7ffd89ba613c items=0 ppid=2203 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.086000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 23:32:13.087000 audit[2276]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.087000 audit[2276]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff9b372b10 a2=0 a3=7fff9b372afc items=0 ppid=2203 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.087000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 23:32:13.089000 audit[2278]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.089000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc1ff3b750 a2=0 a3=7ffc1ff3b73c items=0 ppid=2203 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.089000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 23:32:13.091000 audit[2281]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.091000 audit[2281]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe657e7e20 a2=0 a3=7ffe657e7e0c items=0 ppid=2203 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.091000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 23:32:13.094000 audit[2284]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.094000 audit[2284]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd8f9112b0 a2=0 a3=7ffd8f91129c items=0 ppid=2203 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.094000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 23:32:13.094000 audit[2285]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.094000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcd9ffc690 a2=0 a3=7ffcd9ffc67c items=0 ppid=2203 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.094000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 23:32:13.096000 audit[2287]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.096000 audit[2287]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffca751e4f0 a2=0 a3=7ffca751e4dc items=0 ppid=2203 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.096000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 23:32:13.099000 audit[2290]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.099000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc6d7434a0 a2=0 a3=7ffc6d74348c items=0 ppid=2203 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.099000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 23:32:13.099000 audit[2291]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.099000 audit[2291]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff7c37fca0 a2=0 a3=7fff7c37fc8c items=0 ppid=2203 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.099000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 23:32:13.101000 audit[2293]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:32:13.101000 audit[2293]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffead030390 a2=0 a3=7ffead03037c items=0 ppid=2203 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.101000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 23:32:13.160000 audit[2299]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:13.160000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd5f6a48c0 a2=0 a3=7ffd5f6a48ac items=0 ppid=2203 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.160000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:13.180000 audit[2299]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:13.180000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffd5f6a48c0 a2=0 a3=7ffd5f6a48ac items=0 ppid=2203 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.180000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:13.181000 audit[2304]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.181000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcb114f0c0 a2=0 a3=7ffcb114f0ac items=0 ppid=2203 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.181000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 23:32:13.183000 audit[2306]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2306 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.183000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffdf641e610 a2=0 a3=7ffdf641e5fc items=0 ppid=2203 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 14 23:32:13.187000 audit[2309]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2309 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.187000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff8d9ac1c0 a2=0 a3=7fff8d9ac1ac items=0 ppid=2203 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.187000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 14 23:32:13.188000 audit[2310]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.188000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc1fd52b90 a2=0 a3=7ffc1fd52b7c items=0 ppid=2203 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.188000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 23:32:13.190000 audit[2312]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2312 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.190000 audit[2312]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffc216cf90 a2=0 a3=7fffc216cf7c items=0 ppid=2203 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.190000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 23:32:13.191000 audit[2313]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.191000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe16c89e70 a2=0 a3=7ffe16c89e5c items=0 ppid=2203 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.191000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 23:32:13.193000 audit[2315]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.193000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc234d3ad0 a2=0 a3=7ffc234d3abc items=0 ppid=2203 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.193000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 14 23:32:13.196000 audit[2318]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.196000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fff02dd1e50 a2=0 a3=7fff02dd1e3c items=0 ppid=2203 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.196000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 23:32:13.197000 audit[2319]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.197000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe0f53a5b0 a2=0 a3=7ffe0f53a59c items=0 ppid=2203 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.197000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 23:32:13.199000 audit[2321]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.199000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdeaa4fd30 a2=0 a3=7ffdeaa4fd1c items=0 ppid=2203 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.199000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 23:32:13.202000 audit[2322]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2322 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.202000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffea162ec30 a2=0 a3=7ffea162ec1c items=0 ppid=2203 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.202000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 23:32:13.204000 audit[2324]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2324 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.204000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffced0e7530 a2=0 a3=7ffced0e751c items=0 ppid=2203 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.204000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 23:32:13.207000 audit[2327]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2327 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.207000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff95998fc0 a2=0 a3=7fff95998fac items=0 ppid=2203 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.207000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 23:32:13.209000 audit[2330]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2330 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.209000 audit[2330]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeadb9d300 a2=0 a3=7ffeadb9d2ec items=0 ppid=2203 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.209000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 14 23:32:13.210000 audit[2331]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.210000 audit[2331]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff8272f4c0 a2=0 a3=7fff8272f4ac items=0 ppid=2203 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.210000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 23:32:13.211000 audit[2333]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.211000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffee195fec0 a2=0 a3=7ffee195feac items=0 ppid=2203 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.211000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 23:32:13.213000 audit[2336]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2336 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.213000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd68eb2aa0 a2=0 a3=7ffd68eb2a8c items=0 ppid=2203 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.213000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 23:32:13.214000 audit[2337]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2337 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.214000 audit[2337]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf83c8d20 a2=0 a3=7ffdf83c8d0c items=0 ppid=2203 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.214000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 23:32:13.216000 audit[2339]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.216000 audit[2339]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff82b969e0 a2=0 a3=7fff82b969cc items=0 ppid=2203 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.216000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 23:32:13.216000 audit[2340]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2340 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.216000 audit[2340]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf0520950 a2=0 a3=7ffcf052093c items=0 ppid=2203 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.216000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 23:32:13.218000 audit[2342]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2342 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.218000 audit[2342]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcef111ce0 a2=0 a3=7ffcef111ccc items=0 ppid=2203 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.218000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 23:32:13.220000 audit[2345]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2345 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:32:13.220000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffea525d030 a2=0 a3=7ffea525d01c items=0 ppid=2203 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.220000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 23:32:13.224000 audit[2347]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2347 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 23:32:13.224000 audit[2347]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffdf2b72730 a2=0 a3=7ffdf2b7271c items=0 ppid=2203 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.224000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:13.224000 audit[2347]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2347 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 23:32:13.224000 audit[2347]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffdf2b72730 a2=0 a3=7ffdf2b7271c items=0 ppid=2203 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:13.224000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:14.241629 kubelet[2107]: I0714 23:32:14.241585 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-f5bzb" podStartSLOduration=3.241563809 podStartE2EDuration="3.241563809s" podCreationTimestamp="2025-07-14 23:32:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:32:12.442738437 +0000 UTC m=+4.324669241" watchObservedRunningTime="2025-07-14 23:32:14.241563809 +0000 UTC m=+6.123494604" Jul 14 23:32:14.902260 systemd[1]: Created slice kubepods-besteffort-pod88493def_9d04_491f_a200_12284d3a57a9.slice. Jul 14 23:32:14.962281 kubelet[2107]: I0714 23:32:14.962255 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/88493def-9d04-491f-a200-12284d3a57a9-var-lib-calico\") pod \"tigera-operator-747864d56d-2fqzb\" (UID: \"88493def-9d04-491f-a200-12284d3a57a9\") " pod="tigera-operator/tigera-operator-747864d56d-2fqzb" Jul 14 23:32:14.962408 kubelet[2107]: I0714 23:32:14.962398 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5bv7h\" (UniqueName: \"kubernetes.io/projected/88493def-9d04-491f-a200-12284d3a57a9-kube-api-access-5bv7h\") pod \"tigera-operator-747864d56d-2fqzb\" (UID: \"88493def-9d04-491f-a200-12284d3a57a9\") " pod="tigera-operator/tigera-operator-747864d56d-2fqzb" Jul 14 23:32:15.205297 env[1252]: time="2025-07-14T23:32:15.205213950Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-2fqzb,Uid:88493def-9d04-491f-a200-12284d3a57a9,Namespace:tigera-operator,Attempt:0,}" Jul 14 23:32:15.233308 env[1252]: time="2025-07-14T23:32:15.232924066Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:15.233308 env[1252]: time="2025-07-14T23:32:15.232962876Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:15.233308 env[1252]: time="2025-07-14T23:32:15.232972839Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:15.233308 env[1252]: time="2025-07-14T23:32:15.233211565Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a45612a08f6f1e6684d3bb0f7e63dfa7a40eb5e8abd19d0c8aca2ad673d1b6b7 pid=2362 runtime=io.containerd.runc.v2 Jul 14 23:32:15.255242 systemd[1]: Started cri-containerd-a45612a08f6f1e6684d3bb0f7e63dfa7a40eb5e8abd19d0c8aca2ad673d1b6b7.scope. Jul 14 23:32:15.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.266000 audit: BPF prog-id=107 op=LOAD Jul 14 23:32:15.267000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.267000 audit[2372]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2362 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:15.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134353631326130386636663165363638346433626230663765363364 Jul 14 23:32:15.267000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.267000 audit[2372]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2362 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:15.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134353631326130386636663165363638346433626230663765363364 Jul 14 23:32:15.267000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.267000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.267000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.267000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.267000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.267000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.267000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.267000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.267000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.267000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.267000 audit: BPF prog-id=108 op=LOAD Jul 14 23:32:15.267000 audit[2372]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000312320 items=0 ppid=2362 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:15.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134353631326130386636663165363638346433626230663765363364 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit: BPF prog-id=109 op=LOAD Jul 14 23:32:15.268000 audit[2372]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000312368 items=0 ppid=2362 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:15.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134353631326130386636663165363638346433626230663765363364 Jul 14 23:32:15.268000 audit: BPF prog-id=109 op=UNLOAD Jul 14 23:32:15.268000 audit: BPF prog-id=108 op=UNLOAD Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:15.268000 audit: BPF prog-id=110 op=LOAD Jul 14 23:32:15.268000 audit[2372]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000312778 items=0 ppid=2362 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:15.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134353631326130386636663165363638346433626230663765363364 Jul 14 23:32:15.294916 env[1252]: time="2025-07-14T23:32:15.294873141Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-2fqzb,Uid:88493def-9d04-491f-a200-12284d3a57a9,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"a45612a08f6f1e6684d3bb0f7e63dfa7a40eb5e8abd19d0c8aca2ad673d1b6b7\"" Jul 14 23:32:15.305377 env[1252]: time="2025-07-14T23:32:15.305349957Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 14 23:32:16.074862 systemd[1]: run-containerd-runc-k8s.io-a45612a08f6f1e6684d3bb0f7e63dfa7a40eb5e8abd19d0c8aca2ad673d1b6b7-runc.bJ7MRF.mount: Deactivated successfully. Jul 14 23:32:17.003664 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3407108123.mount: Deactivated successfully. Jul 14 23:32:18.277933 env[1252]: time="2025-07-14T23:32:18.277893639Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:18.279230 env[1252]: time="2025-07-14T23:32:18.279212558Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:18.280379 env[1252]: time="2025-07-14T23:32:18.280347833Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:18.281585 env[1252]: time="2025-07-14T23:32:18.281563648Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:18.281936 env[1252]: time="2025-07-14T23:32:18.281910143Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 14 23:32:18.288553 env[1252]: time="2025-07-14T23:32:18.288523886Z" level=info msg="CreateContainer within sandbox \"a45612a08f6f1e6684d3bb0f7e63dfa7a40eb5e8abd19d0c8aca2ad673d1b6b7\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 14 23:32:18.295155 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount40581579.mount: Deactivated successfully. Jul 14 23:32:18.298936 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount528739047.mount: Deactivated successfully. Jul 14 23:32:18.302664 env[1252]: time="2025-07-14T23:32:18.302634814Z" level=info msg="CreateContainer within sandbox \"a45612a08f6f1e6684d3bb0f7e63dfa7a40eb5e8abd19d0c8aca2ad673d1b6b7\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"221e1eaa2aa61ff7c154362d4ac41d6179bd218207cb4fef15114891d200eecc\"" Jul 14 23:32:18.304177 env[1252]: time="2025-07-14T23:32:18.304077682Z" level=info msg="StartContainer for \"221e1eaa2aa61ff7c154362d4ac41d6179bd218207cb4fef15114891d200eecc\"" Jul 14 23:32:18.317711 systemd[1]: Started cri-containerd-221e1eaa2aa61ff7c154362d4ac41d6179bd218207cb4fef15114891d200eecc.scope. Jul 14 23:32:18.342719 kernel: kauditd_printk_skb: 200 callbacks suppressed Jul 14 23:32:18.342794 kernel: audit: type=1400 audit(1752535938.333:909): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.342814 kernel: audit: type=1400 audit(1752535938.333:910): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.342830 kernel: audit: type=1400 audit(1752535938.333:911): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.345552 kernel: audit: type=1400 audit(1752535938.333:912): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.348032 kernel: audit: type=1400 audit(1752535938.333:913): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.350555 kernel: audit: type=1400 audit(1752535938.333:914): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.353057 kernel: audit: type=1400 audit(1752535938.333:915): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.355512 kernel: audit: type=1400 audit(1752535938.333:916): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.357969 kernel: audit: type=1400 audit(1752535938.333:917): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.361401 kernel: audit: type=1400 audit(1752535938.333:918): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.333000 audit: BPF prog-id=111 op=LOAD Jul 14 23:32:18.339000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.339000 audit[2401]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2362 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:18.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232316531656161326161363166663763313534333632643461633431 Jul 14 23:32:18.339000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.339000 audit[2401]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2362 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:18.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232316531656161326161363166663763313534333632643461633431 Jul 14 23:32:18.339000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.339000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.339000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.339000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.339000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.339000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.339000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.339000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.339000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.339000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.339000 audit: BPF prog-id=112 op=LOAD Jul 14 23:32:18.339000 audit[2401]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c00028d6b0 items=0 ppid=2362 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:18.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232316531656161326161363166663763313534333632643461633431 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit: BPF prog-id=113 op=LOAD Jul 14 23:32:18.341000 audit[2401]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c00028d6f8 items=0 ppid=2362 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:18.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232316531656161326161363166663763313534333632643461633431 Jul 14 23:32:18.341000 audit: BPF prog-id=113 op=UNLOAD Jul 14 23:32:18.341000 audit: BPF prog-id=112 op=UNLOAD Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { perfmon } for pid=2401 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit[2401]: AVC avc: denied { bpf } for pid=2401 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:18.341000 audit: BPF prog-id=114 op=LOAD Jul 14 23:32:18.341000 audit[2401]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c00028db08 items=0 ppid=2362 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:18.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232316531656161326161363166663763313534333632643461633431 Jul 14 23:32:18.413623 env[1252]: time="2025-07-14T23:32:18.413597042Z" level=info msg="StartContainer for \"221e1eaa2aa61ff7c154362d4ac41d6179bd218207cb4fef15114891d200eecc\" returns successfully" Jul 14 23:32:18.496477 kubelet[2107]: I0714 23:32:18.496441 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-2fqzb" podStartSLOduration=1.495859651 podStartE2EDuration="4.484600437s" podCreationTimestamp="2025-07-14 23:32:14 +0000 UTC" firstStartedPulling="2025-07-14 23:32:15.295727651 +0000 UTC m=+7.177658439" lastFinishedPulling="2025-07-14 23:32:18.28446844 +0000 UTC m=+10.166399225" observedRunningTime="2025-07-14 23:32:18.473013012 +0000 UTC m=+10.354943815" watchObservedRunningTime="2025-07-14 23:32:18.484600437 +0000 UTC m=+10.366531233" Jul 14 23:32:23.723863 sudo[1475]: pam_unix(sudo:session): session closed for user root Jul 14 23:32:23.727874 kernel: kauditd_printk_skb: 47 callbacks suppressed Jul 14 23:32:23.727916 kernel: audit: type=1106 audit(1752535943.722:927): pid=1475 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:32:23.722000 audit[1475]: USER_END pid=1475 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:32:23.731123 kernel: audit: type=1104 audit(1752535943.722:928): pid=1475 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:32:23.722000 audit[1475]: CRED_DISP pid=1475 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:32:23.739897 sshd[1471]: pam_unix(sshd:session): session closed for user core Jul 14 23:32:23.741000 audit[1471]: USER_END pid=1471 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:32:23.751182 kernel: audit: type=1106 audit(1752535943.741:929): pid=1471 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:32:23.751260 kernel: audit: type=1104 audit(1752535943.741:930): pid=1471 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:32:23.741000 audit[1471]: CRED_DISP pid=1471 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:32:23.754298 systemd[1]: sshd@7-139.178.70.110:22-139.178.89.65:53794.service: Deactivated successfully. Jul 14 23:32:23.754785 systemd[1]: session-9.scope: Deactivated successfully. Jul 14 23:32:23.754877 systemd[1]: session-9.scope: Consumed 2.900s CPU time. Jul 14 23:32:23.759424 kernel: audit: type=1131 audit(1752535943.753:931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.110:22-139.178.89.65:53794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:32:23.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.110:22-139.178.89.65:53794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:32:23.759000 systemd-logind[1237]: Session 9 logged out. Waiting for processes to exit. Jul 14 23:32:23.759923 systemd-logind[1237]: Removed session 9. Jul 14 23:32:24.445000 audit[2475]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:24.453665 kernel: audit: type=1325 audit(1752535944.445:932): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:24.453765 kernel: audit: type=1300 audit(1752535944.445:932): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe10cbb3f0 a2=0 a3=7ffe10cbb3dc items=0 ppid=2203 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:24.445000 audit[2475]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe10cbb3f0 a2=0 a3=7ffe10cbb3dc items=0 ppid=2203 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:24.445000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:24.458369 kernel: audit: type=1327 audit(1752535944.445:932): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:24.473921 kernel: audit: type=1325 audit(1752535944.466:933): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:24.474024 kernel: audit: type=1300 audit(1752535944.466:933): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe10cbb3f0 a2=0 a3=0 items=0 ppid=2203 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:24.466000 audit[2475]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:24.466000 audit[2475]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe10cbb3f0 a2=0 a3=0 items=0 ppid=2203 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:24.466000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:24.485000 audit[2477]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2477 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:24.485000 audit[2477]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff999ebec0 a2=0 a3=7fff999ebeac items=0 ppid=2203 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:24.485000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:24.500000 audit[2477]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2477 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:24.500000 audit[2477]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff999ebec0 a2=0 a3=0 items=0 ppid=2203 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:24.500000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:25.754000 audit[2480]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2480 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:25.754000 audit[2480]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffea8151010 a2=0 a3=7ffea8150ffc items=0 ppid=2203 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:25.754000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:25.763000 audit[2480]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2480 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:25.763000 audit[2480]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffea8151010 a2=0 a3=0 items=0 ppid=2203 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:25.763000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:26.400000 audit[2482]: NETFILTER_CFG table=filter:95 family=2 entries=20 op=nft_register_rule pid=2482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:26.400000 audit[2482]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe13e0b1b0 a2=0 a3=7ffe13e0b19c items=0 ppid=2203 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:26.400000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:26.407000 audit[2482]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:26.407000 audit[2482]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe13e0b1b0 a2=0 a3=0 items=0 ppid=2203 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:26.407000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:26.462939 systemd[1]: Created slice kubepods-besteffort-podb6c9742c_d008_4054_be99_ed3edfe520b7.slice. Jul 14 23:32:26.468740 kubelet[2107]: I0714 23:32:26.468707 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b6c9742c-d008-4054-be99-ed3edfe520b7-tigera-ca-bundle\") pod \"calico-typha-6566d67878-kwmnz\" (UID: \"b6c9742c-d008-4054-be99-ed3edfe520b7\") " pod="calico-system/calico-typha-6566d67878-kwmnz" Jul 14 23:32:26.468740 kubelet[2107]: I0714 23:32:26.468742 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fnh8w\" (UniqueName: \"kubernetes.io/projected/b6c9742c-d008-4054-be99-ed3edfe520b7-kube-api-access-fnh8w\") pod \"calico-typha-6566d67878-kwmnz\" (UID: \"b6c9742c-d008-4054-be99-ed3edfe520b7\") " pod="calico-system/calico-typha-6566d67878-kwmnz" Jul 14 23:32:26.469050 kubelet[2107]: I0714 23:32:26.468762 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/b6c9742c-d008-4054-be99-ed3edfe520b7-typha-certs\") pod \"calico-typha-6566d67878-kwmnz\" (UID: \"b6c9742c-d008-4054-be99-ed3edfe520b7\") " pod="calico-system/calico-typha-6566d67878-kwmnz" Jul 14 23:32:26.706953 systemd[1]: Created slice kubepods-besteffort-podbc91fd47_2910_43e1_904d_f6185795998e.slice. Jul 14 23:32:26.770067 kubelet[2107]: I0714 23:32:26.770042 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/bc91fd47-2910-43e1-904d-f6185795998e-cni-net-dir\") pod \"calico-node-j77n6\" (UID: \"bc91fd47-2910-43e1-904d-f6185795998e\") " pod="calico-system/calico-node-j77n6" Jul 14 23:32:26.770214 kubelet[2107]: I0714 23:32:26.770203 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bc91fd47-2910-43e1-904d-f6185795998e-lib-modules\") pod \"calico-node-j77n6\" (UID: \"bc91fd47-2910-43e1-904d-f6185795998e\") " pod="calico-system/calico-node-j77n6" Jul 14 23:32:26.770259 env[1252]: time="2025-07-14T23:32:26.770198944Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6566d67878-kwmnz,Uid:b6c9742c-d008-4054-be99-ed3edfe520b7,Namespace:calico-system,Attempt:0,}" Jul 14 23:32:26.770573 kubelet[2107]: I0714 23:32:26.770548 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/bc91fd47-2910-43e1-904d-f6185795998e-node-certs\") pod \"calico-node-j77n6\" (UID: \"bc91fd47-2910-43e1-904d-f6185795998e\") " pod="calico-system/calico-node-j77n6" Jul 14 23:32:26.770636 kubelet[2107]: I0714 23:32:26.770626 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/bc91fd47-2910-43e1-904d-f6185795998e-var-lib-calico\") pod \"calico-node-j77n6\" (UID: \"bc91fd47-2910-43e1-904d-f6185795998e\") " pod="calico-system/calico-node-j77n6" Jul 14 23:32:26.770702 kubelet[2107]: I0714 23:32:26.770692 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/bc91fd47-2910-43e1-904d-f6185795998e-cni-bin-dir\") pod \"calico-node-j77n6\" (UID: \"bc91fd47-2910-43e1-904d-f6185795998e\") " pod="calico-system/calico-node-j77n6" Jul 14 23:32:26.770762 kubelet[2107]: I0714 23:32:26.770752 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/bc91fd47-2910-43e1-904d-f6185795998e-flexvol-driver-host\") pod \"calico-node-j77n6\" (UID: \"bc91fd47-2910-43e1-904d-f6185795998e\") " pod="calico-system/calico-node-j77n6" Jul 14 23:32:26.770832 kubelet[2107]: I0714 23:32:26.770821 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/bc91fd47-2910-43e1-904d-f6185795998e-var-run-calico\") pod \"calico-node-j77n6\" (UID: \"bc91fd47-2910-43e1-904d-f6185795998e\") " pod="calico-system/calico-node-j77n6" Jul 14 23:32:26.770906 kubelet[2107]: I0714 23:32:26.770895 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bc91fd47-2910-43e1-904d-f6185795998e-xtables-lock\") pod \"calico-node-j77n6\" (UID: \"bc91fd47-2910-43e1-904d-f6185795998e\") " pod="calico-system/calico-node-j77n6" Jul 14 23:32:26.770963 kubelet[2107]: I0714 23:32:26.770953 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/bc91fd47-2910-43e1-904d-f6185795998e-tigera-ca-bundle\") pod \"calico-node-j77n6\" (UID: \"bc91fd47-2910-43e1-904d-f6185795998e\") " pod="calico-system/calico-node-j77n6" Jul 14 23:32:26.771026 kubelet[2107]: I0714 23:32:26.771017 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-csjgh\" (UniqueName: \"kubernetes.io/projected/bc91fd47-2910-43e1-904d-f6185795998e-kube-api-access-csjgh\") pod \"calico-node-j77n6\" (UID: \"bc91fd47-2910-43e1-904d-f6185795998e\") " pod="calico-system/calico-node-j77n6" Jul 14 23:32:26.771087 kubelet[2107]: I0714 23:32:26.771078 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/bc91fd47-2910-43e1-904d-f6185795998e-cni-log-dir\") pod \"calico-node-j77n6\" (UID: \"bc91fd47-2910-43e1-904d-f6185795998e\") " pod="calico-system/calico-node-j77n6" Jul 14 23:32:26.771158 kubelet[2107]: I0714 23:32:26.771149 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/bc91fd47-2910-43e1-904d-f6185795998e-policysync\") pod \"calico-node-j77n6\" (UID: \"bc91fd47-2910-43e1-904d-f6185795998e\") " pod="calico-system/calico-node-j77n6" Jul 14 23:32:26.797739 env[1252]: time="2025-07-14T23:32:26.797570638Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:26.797739 env[1252]: time="2025-07-14T23:32:26.797608477Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:26.797739 env[1252]: time="2025-07-14T23:32:26.797616429Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:26.798001 env[1252]: time="2025-07-14T23:32:26.797952782Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/163f25b9255b67549b556ee965b7097572e920d69757811790bb043598bc848e pid=2493 runtime=io.containerd.runc.v2 Jul 14 23:32:26.818563 systemd[1]: Started cri-containerd-163f25b9255b67549b556ee965b7097572e920d69757811790bb043598bc848e.scope. Jul 14 23:32:26.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit: BPF prog-id=115 op=LOAD Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2493 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:26.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136336632356239323535623637353439623535366565393635623730 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2493 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:26.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136336632356239323535623637353439623535366565393635623730 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit: BPF prog-id=116 op=LOAD Jul 14 23:32:26.845000 audit[2501]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000219bc0 items=0 ppid=2493 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:26.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136336632356239323535623637353439623535366565393635623730 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.845000 audit: BPF prog-id=117 op=LOAD Jul 14 23:32:26.845000 audit[2501]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000219c08 items=0 ppid=2493 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:26.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136336632356239323535623637353439623535366565393635623730 Jul 14 23:32:26.845000 audit: BPF prog-id=117 op=UNLOAD Jul 14 23:32:26.845000 audit: BPF prog-id=116 op=UNLOAD Jul 14 23:32:26.846000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.846000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.846000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.846000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.846000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.846000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.846000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.846000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.846000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.846000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:26.846000 audit: BPF prog-id=118 op=LOAD Jul 14 23:32:26.846000 audit[2501]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000318018 items=0 ppid=2493 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:26.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136336632356239323535623637353439623535366565393635623730 Jul 14 23:32:26.868847 env[1252]: time="2025-07-14T23:32:26.868823491Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6566d67878-kwmnz,Uid:b6c9742c-d008-4054-be99-ed3edfe520b7,Namespace:calico-system,Attempt:0,} returns sandbox id \"163f25b9255b67549b556ee965b7097572e920d69757811790bb043598bc848e\"" Jul 14 23:32:26.870042 env[1252]: time="2025-07-14T23:32:26.870029236Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 14 23:32:26.979507 kubelet[2107]: E0714 23:32:26.979232 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-dgp89" podUID="e774804a-35d8-44da-8f27-608495f04638" Jul 14 23:32:27.009480 env[1252]: time="2025-07-14T23:32:27.009455537Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-j77n6,Uid:bc91fd47-2910-43e1-904d-f6185795998e,Namespace:calico-system,Attempt:0,}" Jul 14 23:32:27.042173 env[1252]: time="2025-07-14T23:32:27.042125873Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:27.042173 env[1252]: time="2025-07-14T23:32:27.042154024Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:27.042331 env[1252]: time="2025-07-14T23:32:27.042161173Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:27.042528 env[1252]: time="2025-07-14T23:32:27.042498070Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/17a300bbead671cd3b54b5e510914811d6bceffa15c48e90341b93f9d4ab7dbc pid=2540 runtime=io.containerd.runc.v2 Jul 14 23:32:27.051213 systemd[1]: Started cri-containerd-17a300bbead671cd3b54b5e510914811d6bceffa15c48e90341b93f9d4ab7dbc.scope. Jul 14 23:32:27.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit: BPF prog-id=119 op=LOAD Jul 14 23:32:27.060000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit[2550]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2540 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:27.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613330306262656164363731636433623534623565353130393134 Jul 14 23:32:27.060000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit[2550]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2540 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:27.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613330306262656164363731636433623534623565353130393134 Jul 14 23:32:27.060000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.060000 audit: BPF prog-id=120 op=LOAD Jul 14 23:32:27.060000 audit[2550]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001ccaa0 items=0 ppid=2540 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:27.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613330306262656164363731636433623534623565353130393134 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit: BPF prog-id=121 op=LOAD Jul 14 23:32:27.061000 audit[2550]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001ccae8 items=0 ppid=2540 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:27.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613330306262656164363731636433623534623565353130393134 Jul 14 23:32:27.061000 audit: BPF prog-id=121 op=UNLOAD Jul 14 23:32:27.061000 audit: BPF prog-id=120 op=UNLOAD Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { perfmon } for pid=2550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit[2550]: AVC avc: denied { bpf } for pid=2550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:27.061000 audit: BPF prog-id=122 op=LOAD Jul 14 23:32:27.061000 audit[2550]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001ccef8 items=0 ppid=2540 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:27.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613330306262656164363731636433623534623565353130393134 Jul 14 23:32:27.069272 kubelet[2107]: E0714 23:32:27.069209 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.069272 kubelet[2107]: W0714 23:32:27.069226 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.069803 kubelet[2107]: E0714 23:32:27.069743 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.069953 kubelet[2107]: E0714 23:32:27.069888 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.069953 kubelet[2107]: W0714 23:32:27.069895 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.069953 kubelet[2107]: E0714 23:32:27.069902 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.070161 kubelet[2107]: E0714 23:32:27.070064 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.070161 kubelet[2107]: W0714 23:32:27.070071 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.070161 kubelet[2107]: E0714 23:32:27.070076 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.070365 kubelet[2107]: E0714 23:32:27.070284 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.070365 kubelet[2107]: W0714 23:32:27.070290 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.070365 kubelet[2107]: E0714 23:32:27.070296 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.070546 kubelet[2107]: E0714 23:32:27.070486 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.070546 kubelet[2107]: W0714 23:32:27.070493 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.070546 kubelet[2107]: E0714 23:32:27.070498 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.070726 kubelet[2107]: E0714 23:32:27.070670 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.070726 kubelet[2107]: W0714 23:32:27.070676 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.070726 kubelet[2107]: E0714 23:32:27.070681 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.070895 kubelet[2107]: E0714 23:32:27.070837 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.070895 kubelet[2107]: W0714 23:32:27.070845 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.070895 kubelet[2107]: E0714 23:32:27.070850 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.071098 kubelet[2107]: E0714 23:32:27.071027 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.071098 kubelet[2107]: W0714 23:32:27.071034 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.071098 kubelet[2107]: E0714 23:32:27.071039 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.071259 kubelet[2107]: E0714 23:32:27.071204 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.071259 kubelet[2107]: W0714 23:32:27.071210 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.071259 kubelet[2107]: E0714 23:32:27.071216 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.071463 kubelet[2107]: E0714 23:32:27.071393 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.071463 kubelet[2107]: W0714 23:32:27.071399 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.071463 kubelet[2107]: E0714 23:32:27.071411 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.071643 kubelet[2107]: E0714 23:32:27.071580 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.071643 kubelet[2107]: W0714 23:32:27.071586 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.071643 kubelet[2107]: E0714 23:32:27.071593 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.071827 kubelet[2107]: E0714 23:32:27.071755 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.071827 kubelet[2107]: W0714 23:32:27.071761 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.071827 kubelet[2107]: E0714 23:32:27.071766 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.072032 kubelet[2107]: E0714 23:32:27.071969 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.072032 kubelet[2107]: W0714 23:32:27.071977 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.072032 kubelet[2107]: E0714 23:32:27.071985 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.072212 kubelet[2107]: E0714 23:32:27.072158 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.072212 kubelet[2107]: W0714 23:32:27.072165 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.072212 kubelet[2107]: E0714 23:32:27.072170 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.072404 kubelet[2107]: E0714 23:32:27.072325 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.072404 kubelet[2107]: W0714 23:32:27.072331 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.072404 kubelet[2107]: E0714 23:32:27.072337 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.072571 kubelet[2107]: E0714 23:32:27.072514 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.072571 kubelet[2107]: W0714 23:32:27.072521 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.072571 kubelet[2107]: E0714 23:32:27.072526 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.072727 kubelet[2107]: E0714 23:32:27.072675 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.072727 kubelet[2107]: W0714 23:32:27.072681 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.072727 kubelet[2107]: E0714 23:32:27.072687 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.072892 kubelet[2107]: E0714 23:32:27.072838 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.072892 kubelet[2107]: W0714 23:32:27.072844 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.072892 kubelet[2107]: E0714 23:32:27.072849 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.073045 kubelet[2107]: E0714 23:32:27.072993 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.073045 kubelet[2107]: W0714 23:32:27.073001 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.073045 kubelet[2107]: E0714 23:32:27.073006 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.073153 kubelet[2107]: E0714 23:32:27.073146 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.073201 kubelet[2107]: W0714 23:32:27.073192 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.073246 kubelet[2107]: E0714 23:32:27.073237 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.073649 kubelet[2107]: E0714 23:32:27.073641 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.073705 kubelet[2107]: W0714 23:32:27.073696 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.073763 kubelet[2107]: E0714 23:32:27.073754 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.073827 kubelet[2107]: I0714 23:32:27.073817 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/e774804a-35d8-44da-8f27-608495f04638-varrun\") pod \"csi-node-driver-dgp89\" (UID: \"e774804a-35d8-44da-8f27-608495f04638\") " pod="calico-system/csi-node-driver-dgp89" Jul 14 23:32:27.073985 kubelet[2107]: E0714 23:32:27.073976 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.074032 kubelet[2107]: W0714 23:32:27.074023 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.074087 kubelet[2107]: E0714 23:32:27.074079 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.074220 kubelet[2107]: E0714 23:32:27.074211 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.074269 kubelet[2107]: W0714 23:32:27.074260 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.074318 kubelet[2107]: E0714 23:32:27.074310 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.074439 kubelet[2107]: I0714 23:32:27.074429 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/e774804a-35d8-44da-8f27-608495f04638-registration-dir\") pod \"csi-node-driver-dgp89\" (UID: \"e774804a-35d8-44da-8f27-608495f04638\") " pod="calico-system/csi-node-driver-dgp89" Jul 14 23:32:27.074545 kubelet[2107]: E0714 23:32:27.074538 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.074589 kubelet[2107]: W0714 23:32:27.074580 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.074640 kubelet[2107]: E0714 23:32:27.074631 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.075113 kubelet[2107]: E0714 23:32:27.075106 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.075171 kubelet[2107]: W0714 23:32:27.075162 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.075232 kubelet[2107]: E0714 23:32:27.075222 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.075350 kubelet[2107]: E0714 23:32:27.075336 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.075403 kubelet[2107]: W0714 23:32:27.075349 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.075403 kubelet[2107]: E0714 23:32:27.075378 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.075403 kubelet[2107]: I0714 23:32:27.075391 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/e774804a-35d8-44da-8f27-608495f04638-kubelet-dir\") pod \"csi-node-driver-dgp89\" (UID: \"e774804a-35d8-44da-8f27-608495f04638\") " pod="calico-system/csi-node-driver-dgp89" Jul 14 23:32:27.075564 kubelet[2107]: E0714 23:32:27.075554 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.075564 kubelet[2107]: W0714 23:32:27.075561 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.075637 kubelet[2107]: E0714 23:32:27.075568 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.075675 kubelet[2107]: E0714 23:32:27.075666 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.075675 kubelet[2107]: W0714 23:32:27.075673 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.075729 kubelet[2107]: E0714 23:32:27.075679 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.075871 kubelet[2107]: E0714 23:32:27.075843 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.075871 kubelet[2107]: W0714 23:32:27.075850 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.075871 kubelet[2107]: E0714 23:32:27.075856 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.075974 kubelet[2107]: E0714 23:32:27.075968 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.075974 kubelet[2107]: W0714 23:32:27.075973 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.076019 kubelet[2107]: E0714 23:32:27.075979 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.076019 kubelet[2107]: I0714 23:32:27.075988 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/e774804a-35d8-44da-8f27-608495f04638-socket-dir\") pod \"csi-node-driver-dgp89\" (UID: \"e774804a-35d8-44da-8f27-608495f04638\") " pod="calico-system/csi-node-driver-dgp89" Jul 14 23:32:27.076081 kubelet[2107]: E0714 23:32:27.076069 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.076081 kubelet[2107]: W0714 23:32:27.076079 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.076142 kubelet[2107]: E0714 23:32:27.076088 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.076142 kubelet[2107]: I0714 23:32:27.076102 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zn275\" (UniqueName: \"kubernetes.io/projected/e774804a-35d8-44da-8f27-608495f04638-kube-api-access-zn275\") pod \"csi-node-driver-dgp89\" (UID: \"e774804a-35d8-44da-8f27-608495f04638\") " pod="calico-system/csi-node-driver-dgp89" Jul 14 23:32:27.076211 kubelet[2107]: E0714 23:32:27.076200 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.076252 kubelet[2107]: W0714 23:32:27.076209 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.076252 kubelet[2107]: E0714 23:32:27.076221 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.076303 kubelet[2107]: E0714 23:32:27.076294 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.076303 kubelet[2107]: W0714 23:32:27.076299 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.076342 kubelet[2107]: E0714 23:32:27.076304 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.076413 kubelet[2107]: E0714 23:32:27.076404 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.076413 kubelet[2107]: W0714 23:32:27.076410 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.076474 kubelet[2107]: E0714 23:32:27.076415 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.076500 kubelet[2107]: E0714 23:32:27.076495 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.076523 kubelet[2107]: W0714 23:32:27.076499 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.076523 kubelet[2107]: E0714 23:32:27.076504 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.077282 env[1252]: time="2025-07-14T23:32:27.077256049Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-j77n6,Uid:bc91fd47-2910-43e1-904d-f6185795998e,Namespace:calico-system,Attempt:0,} returns sandbox id \"17a300bbead671cd3b54b5e510914811d6bceffa15c48e90341b93f9d4ab7dbc\"" Jul 14 23:32:27.176796 kubelet[2107]: E0714 23:32:27.176778 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.176904 kubelet[2107]: W0714 23:32:27.176892 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.176969 kubelet[2107]: E0714 23:32:27.176959 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.177230 kubelet[2107]: E0714 23:32:27.177222 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.177280 kubelet[2107]: W0714 23:32:27.177271 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.177332 kubelet[2107]: E0714 23:32:27.177324 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.177486 kubelet[2107]: E0714 23:32:27.177479 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.177537 kubelet[2107]: W0714 23:32:27.177529 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.177592 kubelet[2107]: E0714 23:32:27.177584 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.177724 kubelet[2107]: E0714 23:32:27.177718 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.177771 kubelet[2107]: W0714 23:32:27.177763 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.177821 kubelet[2107]: E0714 23:32:27.177813 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.177947 kubelet[2107]: E0714 23:32:27.177941 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.177995 kubelet[2107]: W0714 23:32:27.177987 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.178050 kubelet[2107]: E0714 23:32:27.178042 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.178147 kubelet[2107]: E0714 23:32:27.178136 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.178147 kubelet[2107]: W0714 23:32:27.178146 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.178210 kubelet[2107]: E0714 23:32:27.178157 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.178259 kubelet[2107]: E0714 23:32:27.178247 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.178259 kubelet[2107]: W0714 23:32:27.178254 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.178259 kubelet[2107]: E0714 23:32:27.178262 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.178363 kubelet[2107]: E0714 23:32:27.178343 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.178363 kubelet[2107]: W0714 23:32:27.178349 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.178363 kubelet[2107]: E0714 23:32:27.178361 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.178460 kubelet[2107]: E0714 23:32:27.178449 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.178460 kubelet[2107]: W0714 23:32:27.178458 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.178522 kubelet[2107]: E0714 23:32:27.178468 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.178543 kubelet[2107]: E0714 23:32:27.178540 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.178565 kubelet[2107]: W0714 23:32:27.178544 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.178565 kubelet[2107]: E0714 23:32:27.178551 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.178631 kubelet[2107]: E0714 23:32:27.178620 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.178631 kubelet[2107]: W0714 23:32:27.178628 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.178710 kubelet[2107]: E0714 23:32:27.178699 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.178710 kubelet[2107]: W0714 23:32:27.178707 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.178770 kubelet[2107]: E0714 23:32:27.178700 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.178821 kubelet[2107]: E0714 23:32:27.178782 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.178865 kubelet[2107]: W0714 23:32:27.178857 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.178941 kubelet[2107]: E0714 23:32:27.178786 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.179023 kubelet[2107]: E0714 23:32:27.179011 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.179023 kubelet[2107]: W0714 23:32:27.179019 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.179080 kubelet[2107]: E0714 23:32:27.179025 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.179113 kubelet[2107]: E0714 23:32:27.178933 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.179236 kubelet[2107]: E0714 23:32:27.179224 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.179236 kubelet[2107]: W0714 23:32:27.179232 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.179300 kubelet[2107]: E0714 23:32:27.179240 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.179374 kubelet[2107]: E0714 23:32:27.179360 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.179374 kubelet[2107]: W0714 23:32:27.179368 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.179374 kubelet[2107]: E0714 23:32:27.179373 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.179482 kubelet[2107]: E0714 23:32:27.179472 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.179482 kubelet[2107]: W0714 23:32:27.179480 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.179547 kubelet[2107]: E0714 23:32:27.179489 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.179639 kubelet[2107]: E0714 23:32:27.179630 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.179639 kubelet[2107]: W0714 23:32:27.179636 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.179698 kubelet[2107]: E0714 23:32:27.179644 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.179733 kubelet[2107]: E0714 23:32:27.179724 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.179733 kubelet[2107]: W0714 23:32:27.179730 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.179801 kubelet[2107]: E0714 23:32:27.179735 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.179827 kubelet[2107]: E0714 23:32:27.179823 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.179851 kubelet[2107]: W0714 23:32:27.179828 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.179851 kubelet[2107]: E0714 23:32:27.179833 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.180691 kubelet[2107]: E0714 23:32:27.180680 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.180761 kubelet[2107]: W0714 23:32:27.180751 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.180820 kubelet[2107]: E0714 23:32:27.180810 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.181028 kubelet[2107]: E0714 23:32:27.181022 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.181081 kubelet[2107]: W0714 23:32:27.181072 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.181145 kubelet[2107]: E0714 23:32:27.181137 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.181382 kubelet[2107]: E0714 23:32:27.181338 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.181382 kubelet[2107]: W0714 23:32:27.181380 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.181456 kubelet[2107]: E0714 23:32:27.181387 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.181666 kubelet[2107]: E0714 23:32:27.181527 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.181666 kubelet[2107]: W0714 23:32:27.181534 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.181666 kubelet[2107]: E0714 23:32:27.181539 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.184723 kubelet[2107]: E0714 23:32:27.184704 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.184723 kubelet[2107]: W0714 23:32:27.184716 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.184723 kubelet[2107]: E0714 23:32:27.184727 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.186493 kubelet[2107]: E0714 23:32:27.186472 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:27.186493 kubelet[2107]: W0714 23:32:27.186489 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:27.186587 kubelet[2107]: E0714 23:32:27.186507 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:27.419000 audit[2637]: NETFILTER_CFG table=filter:97 family=2 entries=22 op=nft_register_rule pid=2637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:27.419000 audit[2637]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff06896ff0 a2=0 a3=7fff06896fdc items=0 ppid=2203 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:27.419000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:27.423000 audit[2637]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:27.423000 audit[2637]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff06896ff0 a2=0 a3=0 items=0 ppid=2203 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:27.423000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:27.577134 systemd[1]: run-containerd-runc-k8s.io-163f25b9255b67549b556ee965b7097572e920d69757811790bb043598bc848e-runc.csHzrm.mount: Deactivated successfully. Jul 14 23:32:28.393774 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount870495555.mount: Deactivated successfully. Jul 14 23:32:29.323917 kubelet[2107]: E0714 23:32:29.323888 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-dgp89" podUID="e774804a-35d8-44da-8f27-608495f04638" Jul 14 23:32:29.383126 env[1252]: time="2025-07-14T23:32:29.383101478Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:29.384401 env[1252]: time="2025-07-14T23:32:29.384386416Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:29.385669 env[1252]: time="2025-07-14T23:32:29.385655427Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:29.387601 env[1252]: time="2025-07-14T23:32:29.387582083Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:29.390601 env[1252]: time="2025-07-14T23:32:29.390576793Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 14 23:32:29.392056 env[1252]: time="2025-07-14T23:32:29.392032754Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 14 23:32:29.404027 env[1252]: time="2025-07-14T23:32:29.403993992Z" level=info msg="CreateContainer within sandbox \"163f25b9255b67549b556ee965b7097572e920d69757811790bb043598bc848e\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 14 23:32:29.410171 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount560322020.mount: Deactivated successfully. Jul 14 23:32:29.425394 env[1252]: time="2025-07-14T23:32:29.425350851Z" level=info msg="CreateContainer within sandbox \"163f25b9255b67549b556ee965b7097572e920d69757811790bb043598bc848e\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"29dca291e46d8a369a4ffd40b363d911184e1db475412cc84824dbd3cdb6f119\"" Jul 14 23:32:29.426962 env[1252]: time="2025-07-14T23:32:29.426937701Z" level=info msg="StartContainer for \"29dca291e46d8a369a4ffd40b363d911184e1db475412cc84824dbd3cdb6f119\"" Jul 14 23:32:29.447895 systemd[1]: Started cri-containerd-29dca291e46d8a369a4ffd40b363d911184e1db475412cc84824dbd3cdb6f119.scope. Jul 14 23:32:29.467080 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 14 23:32:29.467150 kernel: audit: type=1400 audit(1752535949.460:978): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.467170 kernel: audit: type=1400 audit(1752535949.460:979): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.472278 kernel: audit: type=1400 audit(1752535949.460:980): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.474701 kernel: audit: type=1400 audit(1752535949.460:981): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.482696 kernel: audit: type=1400 audit(1752535949.460:982): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.488776 kernel: audit: type=1400 audit(1752535949.460:983): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.488831 kernel: audit: type=1400 audit(1752535949.460:984): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.491854 kernel: audit: type=1400 audit(1752535949.460:985): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.492102 kernel: audit: type=1400 audit(1752535949.460:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.497334 kernel: audit: type=1400 audit(1752535949.466:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.466000 audit: BPF prog-id=123 op=LOAD Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2493 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:29.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239646361323931653436643861333639613466666434306233363364 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2493 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:29.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239646361323931653436643861333639613466666434306233363364 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit: BPF prog-id=124 op=LOAD Jul 14 23:32:29.468000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00045cb60 items=0 ppid=2493 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:29.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239646361323931653436643861333639613466666434306233363364 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit: BPF prog-id=125 op=LOAD Jul 14 23:32:29.468000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00045cba8 items=0 ppid=2493 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:29.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239646361323931653436643861333639613466666434306233363364 Jul 14 23:32:29.468000 audit: BPF prog-id=125 op=UNLOAD Jul 14 23:32:29.468000 audit: BPF prog-id=124 op=UNLOAD Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:29.468000 audit: BPF prog-id=126 op=LOAD Jul 14 23:32:29.468000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00045cfb8 items=0 ppid=2493 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:29.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239646361323931653436643861333639613466666434306233363364 Jul 14 23:32:29.506402 env[1252]: time="2025-07-14T23:32:29.505914754Z" level=info msg="StartContainer for \"29dca291e46d8a369a4ffd40b363d911184e1db475412cc84824dbd3cdb6f119\" returns successfully" Jul 14 23:32:30.486959 kubelet[2107]: I0714 23:32:30.486925 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6566d67878-kwmnz" podStartSLOduration=1.965115928 podStartE2EDuration="4.486912685s" podCreationTimestamp="2025-07-14 23:32:26 +0000 UTC" firstStartedPulling="2025-07-14 23:32:26.869800153 +0000 UTC m=+18.751730940" lastFinishedPulling="2025-07-14 23:32:29.391596908 +0000 UTC m=+21.273527697" observedRunningTime="2025-07-14 23:32:30.486411156 +0000 UTC m=+22.368341952" watchObservedRunningTime="2025-07-14 23:32:30.486912685 +0000 UTC m=+22.368843470" Jul 14 23:32:30.492097 kubelet[2107]: E0714 23:32:30.492075 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.492097 kubelet[2107]: W0714 23:32:30.492089 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.492214 kubelet[2107]: E0714 23:32:30.492111 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.492214 kubelet[2107]: E0714 23:32:30.492212 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.492256 kubelet[2107]: W0714 23:32:30.492217 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.492256 kubelet[2107]: E0714 23:32:30.492223 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.492321 kubelet[2107]: E0714 23:32:30.492308 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.492321 kubelet[2107]: W0714 23:32:30.492319 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.492395 kubelet[2107]: E0714 23:32:30.492326 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.492459 kubelet[2107]: E0714 23:32:30.492448 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.492459 kubelet[2107]: W0714 23:32:30.492457 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.492522 kubelet[2107]: E0714 23:32:30.492465 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.492585 kubelet[2107]: E0714 23:32:30.492576 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.492622 kubelet[2107]: W0714 23:32:30.492586 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.492622 kubelet[2107]: E0714 23:32:30.492595 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.492709 kubelet[2107]: E0714 23:32:30.492699 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.492709 kubelet[2107]: W0714 23:32:30.492708 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.492769 kubelet[2107]: E0714 23:32:30.492715 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.492830 kubelet[2107]: E0714 23:32:30.492820 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.492830 kubelet[2107]: W0714 23:32:30.492829 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.492897 kubelet[2107]: E0714 23:32:30.492836 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.492964 kubelet[2107]: E0714 23:32:30.492952 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.492964 kubelet[2107]: W0714 23:32:30.492963 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.493028 kubelet[2107]: E0714 23:32:30.492971 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.493096 kubelet[2107]: E0714 23:32:30.493086 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.493096 kubelet[2107]: W0714 23:32:30.493094 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.493167 kubelet[2107]: E0714 23:32:30.493108 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.493219 kubelet[2107]: E0714 23:32:30.493208 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.493219 kubelet[2107]: W0714 23:32:30.493217 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.493280 kubelet[2107]: E0714 23:32:30.493224 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.493340 kubelet[2107]: E0714 23:32:30.493330 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.493340 kubelet[2107]: W0714 23:32:30.493340 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.493411 kubelet[2107]: E0714 23:32:30.493347 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.493480 kubelet[2107]: E0714 23:32:30.493470 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.493480 kubelet[2107]: W0714 23:32:30.493479 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.493538 kubelet[2107]: E0714 23:32:30.493490 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.493615 kubelet[2107]: E0714 23:32:30.493603 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.493657 kubelet[2107]: W0714 23:32:30.493614 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.493657 kubelet[2107]: E0714 23:32:30.493625 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.497450 kubelet[2107]: E0714 23:32:30.493732 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.497450 kubelet[2107]: W0714 23:32:30.493738 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.497450 kubelet[2107]: E0714 23:32:30.493745 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.497450 kubelet[2107]: E0714 23:32:30.493868 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.497450 kubelet[2107]: W0714 23:32:30.493874 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.497450 kubelet[2107]: E0714 23:32:30.493881 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.499076 kubelet[2107]: E0714 23:32:30.499065 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.499177 kubelet[2107]: W0714 23:32:30.499168 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.499237 kubelet[2107]: E0714 23:32:30.499228 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.499435 kubelet[2107]: E0714 23:32:30.499422 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.499499 kubelet[2107]: W0714 23:32:30.499491 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.499552 kubelet[2107]: E0714 23:32:30.499539 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.499702 kubelet[2107]: E0714 23:32:30.499695 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.499758 kubelet[2107]: W0714 23:32:30.499749 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.499815 kubelet[2107]: E0714 23:32:30.499805 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.499963 kubelet[2107]: E0714 23:32:30.499957 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.500020 kubelet[2107]: W0714 23:32:30.500012 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.500072 kubelet[2107]: E0714 23:32:30.500064 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.500192 kubelet[2107]: E0714 23:32:30.500178 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.500192 kubelet[2107]: W0714 23:32:30.500188 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.500246 kubelet[2107]: E0714 23:32:30.500200 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.500569 kubelet[2107]: E0714 23:32:30.500561 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.500631 kubelet[2107]: W0714 23:32:30.500622 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.500685 kubelet[2107]: E0714 23:32:30.500676 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.500836 kubelet[2107]: E0714 23:32:30.500829 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.500894 kubelet[2107]: W0714 23:32:30.500885 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.500946 kubelet[2107]: E0714 23:32:30.500938 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.501079 kubelet[2107]: E0714 23:32:30.501072 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.501136 kubelet[2107]: W0714 23:32:30.501128 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.501187 kubelet[2107]: E0714 23:32:30.501176 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.501338 kubelet[2107]: E0714 23:32:30.501329 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.501404 kubelet[2107]: W0714 23:32:30.501396 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.501452 kubelet[2107]: E0714 23:32:30.501444 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.503100 kubelet[2107]: E0714 23:32:30.503092 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.503167 kubelet[2107]: W0714 23:32:30.503158 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.503221 kubelet[2107]: E0714 23:32:30.503210 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.504529 kubelet[2107]: E0714 23:32:30.504522 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.504728 kubelet[2107]: W0714 23:32:30.504619 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.504794 kubelet[2107]: E0714 23:32:30.504785 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.504960 kubelet[2107]: E0714 23:32:30.504954 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.505022 kubelet[2107]: W0714 23:32:30.505014 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.505071 kubelet[2107]: E0714 23:32:30.505063 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.505396 kubelet[2107]: E0714 23:32:30.505344 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.505396 kubelet[2107]: W0714 23:32:30.505369 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.505396 kubelet[2107]: E0714 23:32:30.505389 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.505511 kubelet[2107]: E0714 23:32:30.505499 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.505542 kubelet[2107]: W0714 23:32:30.505510 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.505542 kubelet[2107]: E0714 23:32:30.505520 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.505670 kubelet[2107]: E0714 23:32:30.505647 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.505670 kubelet[2107]: W0714 23:32:30.505658 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.505670 kubelet[2107]: E0714 23:32:30.505667 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.505805 kubelet[2107]: E0714 23:32:30.505766 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.505805 kubelet[2107]: W0714 23:32:30.505771 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.505805 kubelet[2107]: E0714 23:32:30.505776 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.505929 kubelet[2107]: E0714 23:32:30.505918 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.505929 kubelet[2107]: W0714 23:32:30.505925 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.505929 kubelet[2107]: E0714 23:32:30.505930 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:30.506050 kubelet[2107]: E0714 23:32:30.506007 2107 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:32:30.506050 kubelet[2107]: W0714 23:32:30.506011 2107 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:32:30.506050 kubelet[2107]: E0714 23:32:30.506016 2107 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:32:31.046890 env[1252]: time="2025-07-14T23:32:31.046854574Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:31.048381 env[1252]: time="2025-07-14T23:32:31.048339560Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:31.049537 env[1252]: time="2025-07-14T23:32:31.049515595Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:31.050202 env[1252]: time="2025-07-14T23:32:31.050186874Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:31.050597 env[1252]: time="2025-07-14T23:32:31.050581857Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 14 23:32:31.052048 env[1252]: time="2025-07-14T23:32:31.052032407Z" level=info msg="CreateContainer within sandbox \"17a300bbead671cd3b54b5e510914811d6bceffa15c48e90341b93f9d4ab7dbc\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 14 23:32:31.060469 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1296474702.mount: Deactivated successfully. Jul 14 23:32:31.072427 env[1252]: time="2025-07-14T23:32:31.072397932Z" level=info msg="CreateContainer within sandbox \"17a300bbead671cd3b54b5e510914811d6bceffa15c48e90341b93f9d4ab7dbc\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"d39fcae06f28f41fedf93acd5ecf7de44629a96638d94f56fd299ca430786c41\"" Jul 14 23:32:31.073870 env[1252]: time="2025-07-14T23:32:31.073845989Z" level=info msg="StartContainer for \"d39fcae06f28f41fedf93acd5ecf7de44629a96638d94f56fd299ca430786c41\"" Jul 14 23:32:31.092325 systemd[1]: Started cri-containerd-d39fcae06f28f41fedf93acd5ecf7de44629a96638d94f56fd299ca430786c41.scope. Jul 14 23:32:31.100000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.100000 audit[2722]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7fa8245347b8 items=0 ppid=2540 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:31.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433396663616530366632386634316665646639336163643565636637 Jul 14 23:32:31.100000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.100000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.100000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.100000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.100000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.100000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.100000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.100000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.100000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.100000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.100000 audit: BPF prog-id=127 op=LOAD Jul 14 23:32:31.100000 audit[2722]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0002a2308 items=0 ppid=2540 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:31.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433396663616530366632386634316665646639336163643565636637 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit: BPF prog-id=128 op=LOAD Jul 14 23:32:31.101000 audit[2722]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0002a2358 items=0 ppid=2540 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:31.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433396663616530366632386634316665646639336163643565636637 Jul 14 23:32:31.101000 audit: BPF prog-id=128 op=UNLOAD Jul 14 23:32:31.101000 audit: BPF prog-id=127 op=UNLOAD Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { perfmon } for pid=2722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit[2722]: AVC avc: denied { bpf } for pid=2722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:31.101000 audit: BPF prog-id=129 op=LOAD Jul 14 23:32:31.101000 audit[2722]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0002a23e8 items=0 ppid=2540 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:31.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433396663616530366632386634316665646639336163643565636637 Jul 14 23:32:31.116063 env[1252]: time="2025-07-14T23:32:31.114633733Z" level=info msg="StartContainer for \"d39fcae06f28f41fedf93acd5ecf7de44629a96638d94f56fd299ca430786c41\" returns successfully" Jul 14 23:32:31.119796 systemd[1]: cri-containerd-d39fcae06f28f41fedf93acd5ecf7de44629a96638d94f56fd299ca430786c41.scope: Deactivated successfully. Jul 14 23:32:31.121000 audit: BPF prog-id=129 op=UNLOAD Jul 14 23:32:31.323866 kubelet[2107]: E0714 23:32:31.323575 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-dgp89" podUID="e774804a-35d8-44da-8f27-608495f04638" Jul 14 23:32:31.346985 env[1252]: time="2025-07-14T23:32:31.346918064Z" level=info msg="shim disconnected" id=d39fcae06f28f41fedf93acd5ecf7de44629a96638d94f56fd299ca430786c41 Jul 14 23:32:31.346985 env[1252]: time="2025-07-14T23:32:31.346979504Z" level=warning msg="cleaning up after shim disconnected" id=d39fcae06f28f41fedf93acd5ecf7de44629a96638d94f56fd299ca430786c41 namespace=k8s.io Jul 14 23:32:31.346985 env[1252]: time="2025-07-14T23:32:31.346988920Z" level=info msg="cleaning up dead shim" Jul 14 23:32:31.353243 env[1252]: time="2025-07-14T23:32:31.353204941Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:32:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2760 runtime=io.containerd.runc.v2\n" Jul 14 23:32:31.396892 systemd[1]: run-containerd-runc-k8s.io-d39fcae06f28f41fedf93acd5ecf7de44629a96638d94f56fd299ca430786c41-runc.GsjnVY.mount: Deactivated successfully. Jul 14 23:32:31.396954 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d39fcae06f28f41fedf93acd5ecf7de44629a96638d94f56fd299ca430786c41-rootfs.mount: Deactivated successfully. Jul 14 23:32:31.472693 kubelet[2107]: I0714 23:32:31.472679 2107 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:32:31.473834 env[1252]: time="2025-07-14T23:32:31.473813884Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 14 23:32:32.833070 kubelet[2107]: I0714 23:32:32.833051 2107 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:32:32.889000 audit[2777]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2777 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:32.889000 audit[2777]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffca30c7120 a2=0 a3=7ffca30c710c items=0 ppid=2203 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:32.889000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:32.896000 audit[2777]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2777 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:32.896000 audit[2777]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffca30c7120 a2=0 a3=7ffca30c710c items=0 ppid=2203 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:32.896000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:33.324370 kubelet[2107]: E0714 23:32:33.323559 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-dgp89" podUID="e774804a-35d8-44da-8f27-608495f04638" Jul 14 23:32:35.324199 kubelet[2107]: E0714 23:32:35.324022 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-dgp89" podUID="e774804a-35d8-44da-8f27-608495f04638" Jul 14 23:32:35.578026 env[1252]: time="2025-07-14T23:32:35.577946485Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:35.579360 env[1252]: time="2025-07-14T23:32:35.579327402Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:35.580131 env[1252]: time="2025-07-14T23:32:35.580115778Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:35.580916 env[1252]: time="2025-07-14T23:32:35.580900026Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:35.581331 env[1252]: time="2025-07-14T23:32:35.581313780Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 14 23:32:35.583443 env[1252]: time="2025-07-14T23:32:35.583416942Z" level=info msg="CreateContainer within sandbox \"17a300bbead671cd3b54b5e510914811d6bceffa15c48e90341b93f9d4ab7dbc\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 14 23:32:35.590855 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount170563013.mount: Deactivated successfully. Jul 14 23:32:35.597945 env[1252]: time="2025-07-14T23:32:35.597904111Z" level=info msg="CreateContainer within sandbox \"17a300bbead671cd3b54b5e510914811d6bceffa15c48e90341b93f9d4ab7dbc\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"17e73c756843a73da2befd99458da3409d36b9c96f120563569ecbe7a283ff3b\"" Jul 14 23:32:35.598331 env[1252]: time="2025-07-14T23:32:35.598312606Z" level=info msg="StartContainer for \"17e73c756843a73da2befd99458da3409d36b9c96f120563569ecbe7a283ff3b\"" Jul 14 23:32:35.613334 systemd[1]: Started cri-containerd-17e73c756843a73da2befd99458da3409d36b9c96f120563569ecbe7a283ff3b.scope. Jul 14 23:32:35.617263 systemd[1]: run-containerd-runc-k8s.io-17e73c756843a73da2befd99458da3409d36b9c96f120563569ecbe7a283ff3b-runc.HTyVDc.mount: Deactivated successfully. Jul 14 23:32:35.651427 kernel: kauditd_printk_skb: 97 callbacks suppressed Jul 14 23:32:35.658117 kernel: audit: type=1400 audit(1752535955.638:1005): avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.658158 kernel: audit: type=1300 audit(1752535955.638:1005): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f98bb67c1a8 items=0 ppid=2540 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:35.638000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.638000 audit[2786]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f98bb67c1a8 items=0 ppid=2540 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:35.638000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137653733633735363834336137336461326265666439393435386461 Jul 14 23:32:35.663434 kernel: audit: type=1327 audit(1752535955.638:1005): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137653733633735363834336137336461326265666439393435386461 Jul 14 23:32:35.638000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.666440 kernel: audit: type=1400 audit(1752535955.638:1006): avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.638000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.671403 kernel: audit: type=1400 audit(1752535955.638:1006): avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.671438 kernel: audit: type=1400 audit(1752535955.638:1006): avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.638000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.673900 kernel: audit: type=1400 audit(1752535955.638:1006): avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.638000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.673963 env[1252]: time="2025-07-14T23:32:35.671550413Z" level=info msg="StartContainer for \"17e73c756843a73da2befd99458da3409d36b9c96f120563569ecbe7a283ff3b\" returns successfully" Jul 14 23:32:35.638000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.676476 kernel: audit: type=1400 audit(1752535955.638:1006): avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.676512 kernel: audit: type=1400 audit(1752535955.638:1006): avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.638000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.638000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.681270 kernel: audit: type=1400 audit(1752535955.638:1006): avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.638000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.638000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.638000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.638000 audit: BPF prog-id=130 op=LOAD Jul 14 23:32:35.638000 audit[2786]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000383c58 items=0 ppid=2540 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:35.638000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137653733633735363834336137336461326265666439393435386461 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit: BPF prog-id=131 op=LOAD Jul 14 23:32:35.648000 audit[2786]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000383ca8 items=0 ppid=2540 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:35.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137653733633735363834336137336461326265666439393435386461 Jul 14 23:32:35.648000 audit: BPF prog-id=131 op=UNLOAD Jul 14 23:32:35.648000 audit: BPF prog-id=130 op=UNLOAD Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { perfmon } for pid=2786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit[2786]: AVC avc: denied { bpf } for pid=2786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:35.648000 audit: BPF prog-id=132 op=LOAD Jul 14 23:32:35.648000 audit[2786]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000383d38 items=0 ppid=2540 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:35.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137653733633735363834336137336461326265666439393435386461 Jul 14 23:32:37.323755 kubelet[2107]: E0714 23:32:37.323716 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-dgp89" podUID="e774804a-35d8-44da-8f27-608495f04638" Jul 14 23:32:38.343562 env[1252]: time="2025-07-14T23:32:38.343509152Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 23:32:38.345595 systemd[1]: cri-containerd-17e73c756843a73da2befd99458da3409d36b9c96f120563569ecbe7a283ff3b.scope: Deactivated successfully. Jul 14 23:32:38.353000 audit: BPF prog-id=132 op=UNLOAD Jul 14 23:32:38.365633 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-17e73c756843a73da2befd99458da3409d36b9c96f120563569ecbe7a283ff3b-rootfs.mount: Deactivated successfully. Jul 14 23:32:38.414493 kubelet[2107]: I0714 23:32:38.404471 2107 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 14 23:32:38.473425 env[1252]: time="2025-07-14T23:32:38.473396270Z" level=info msg="shim disconnected" id=17e73c756843a73da2befd99458da3409d36b9c96f120563569ecbe7a283ff3b Jul 14 23:32:38.474326 env[1252]: time="2025-07-14T23:32:38.474311794Z" level=warning msg="cleaning up after shim disconnected" id=17e73c756843a73da2befd99458da3409d36b9c96f120563569ecbe7a283ff3b namespace=k8s.io Jul 14 23:32:38.474403 env[1252]: time="2025-07-14T23:32:38.474392506Z" level=info msg="cleaning up dead shim" Jul 14 23:32:38.485937 env[1252]: time="2025-07-14T23:32:38.485905535Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:32:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2825 runtime=io.containerd.runc.v2\n" Jul 14 23:32:38.500254 env[1252]: time="2025-07-14T23:32:38.500230650Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 14 23:32:38.593701 kubelet[2107]: I0714 23:32:38.593624 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wh4n2\" (UniqueName: \"kubernetes.io/projected/64b95d63-e1e4-45ae-87ec-9b99781588aa-kube-api-access-wh4n2\") pod \"goldmane-768f4c5c69-qchs2\" (UID: \"64b95d63-e1e4-45ae-87ec-9b99781588aa\") " pod="calico-system/goldmane-768f4c5c69-qchs2" Jul 14 23:32:38.593701 kubelet[2107]: I0714 23:32:38.593665 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/64b95d63-e1e4-45ae-87ec-9b99781588aa-config\") pod \"goldmane-768f4c5c69-qchs2\" (UID: \"64b95d63-e1e4-45ae-87ec-9b99781588aa\") " pod="calico-system/goldmane-768f4c5c69-qchs2" Jul 14 23:32:38.593701 kubelet[2107]: I0714 23:32:38.593679 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/aeb17c86-3da8-414a-a622-bb7dd1653fb3-calico-apiserver-certs\") pod \"calico-apiserver-7f7ff94-nzt6j\" (UID: \"aeb17c86-3da8-414a-a622-bb7dd1653fb3\") " pod="calico-apiserver/calico-apiserver-7f7ff94-nzt6j" Jul 14 23:32:38.593701 kubelet[2107]: I0714 23:32:38.593689 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gmmnv\" (UniqueName: \"kubernetes.io/projected/68f555d2-1b6e-42a2-b3e2-e56e6ab77430-kube-api-access-gmmnv\") pod \"coredns-668d6bf9bc-d6spx\" (UID: \"68f555d2-1b6e-42a2-b3e2-e56e6ab77430\") " pod="kube-system/coredns-668d6bf9bc-d6spx" Jul 14 23:32:38.593701 kubelet[2107]: I0714 23:32:38.593700 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/64b95d63-e1e4-45ae-87ec-9b99781588aa-goldmane-key-pair\") pod \"goldmane-768f4c5c69-qchs2\" (UID: \"64b95d63-e1e4-45ae-87ec-9b99781588aa\") " pod="calico-system/goldmane-768f4c5c69-qchs2" Jul 14 23:32:38.593904 kubelet[2107]: I0714 23:32:38.593709 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vvq6r\" (UniqueName: \"kubernetes.io/projected/50a79248-0bb4-4c89-913f-a33de4da7041-kube-api-access-vvq6r\") pod \"coredns-668d6bf9bc-svtmh\" (UID: \"50a79248-0bb4-4c89-913f-a33de4da7041\") " pod="kube-system/coredns-668d6bf9bc-svtmh" Jul 14 23:32:38.593904 kubelet[2107]: I0714 23:32:38.593718 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/50a79248-0bb4-4c89-913f-a33de4da7041-config-volume\") pod \"coredns-668d6bf9bc-svtmh\" (UID: \"50a79248-0bb4-4c89-913f-a33de4da7041\") " pod="kube-system/coredns-668d6bf9bc-svtmh" Jul 14 23:32:38.593904 kubelet[2107]: I0714 23:32:38.593729 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q5d87\" (UniqueName: \"kubernetes.io/projected/aeb17c86-3da8-414a-a622-bb7dd1653fb3-kube-api-access-q5d87\") pod \"calico-apiserver-7f7ff94-nzt6j\" (UID: \"aeb17c86-3da8-414a-a622-bb7dd1653fb3\") " pod="calico-apiserver/calico-apiserver-7f7ff94-nzt6j" Jul 14 23:32:38.593904 kubelet[2107]: I0714 23:32:38.593748 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/64b95d63-e1e4-45ae-87ec-9b99781588aa-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-qchs2\" (UID: \"64b95d63-e1e4-45ae-87ec-9b99781588aa\") " pod="calico-system/goldmane-768f4c5c69-qchs2" Jul 14 23:32:38.593904 kubelet[2107]: I0714 23:32:38.593757 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/68f555d2-1b6e-42a2-b3e2-e56e6ab77430-config-volume\") pod \"coredns-668d6bf9bc-d6spx\" (UID: \"68f555d2-1b6e-42a2-b3e2-e56e6ab77430\") " pod="kube-system/coredns-668d6bf9bc-d6spx" Jul 14 23:32:38.610830 systemd[1]: Created slice kubepods-burstable-pod68f555d2_1b6e_42a2_b3e2_e56e6ab77430.slice. Jul 14 23:32:38.624501 systemd[1]: Created slice kubepods-besteffort-podaeb17c86_3da8_414a_a622_bb7dd1653fb3.slice. Jul 14 23:32:38.630940 systemd[1]: Created slice kubepods-besteffort-pod64b95d63_e1e4_45ae_87ec_9b99781588aa.slice. Jul 14 23:32:38.634954 systemd[1]: Created slice kubepods-burstable-pod50a79248_0bb4_4c89_913f_a33de4da7041.slice. Jul 14 23:32:38.638593 systemd[1]: Created slice kubepods-besteffort-poda70a0fd9_ecd0_48c6_88c9_fee4947b61fc.slice. Jul 14 23:32:38.646666 systemd[1]: Created slice kubepods-besteffort-pod1258f5c1_e9aa_4693_bb82_d25ad59c0a09.slice. Jul 14 23:32:38.651954 systemd[1]: Created slice kubepods-besteffort-pod58fd77fd_b503_43f8_b3cb_8485972f220f.slice. Jul 14 23:32:38.794462 kubelet[2107]: I0714 23:32:38.794425 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc-whisker-backend-key-pair\") pod \"whisker-68f66699fc-x4hjn\" (UID: \"a70a0fd9-ecd0-48c6-88c9-fee4947b61fc\") " pod="calico-system/whisker-68f66699fc-x4hjn" Jul 14 23:32:38.794462 kubelet[2107]: I0714 23:32:38.794464 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6jqvk\" (UniqueName: \"kubernetes.io/projected/58fd77fd-b503-43f8-b3cb-8485972f220f-kube-api-access-6jqvk\") pod \"calico-apiserver-7f7ff94-ttkwk\" (UID: \"58fd77fd-b503-43f8-b3cb-8485972f220f\") " pod="calico-apiserver/calico-apiserver-7f7ff94-ttkwk" Jul 14 23:32:38.794601 kubelet[2107]: I0714 23:32:38.794478 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f7887\" (UniqueName: \"kubernetes.io/projected/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc-kube-api-access-f7887\") pod \"whisker-68f66699fc-x4hjn\" (UID: \"a70a0fd9-ecd0-48c6-88c9-fee4947b61fc\") " pod="calico-system/whisker-68f66699fc-x4hjn" Jul 14 23:32:38.794601 kubelet[2107]: I0714 23:32:38.794491 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1258f5c1-e9aa-4693-bb82-d25ad59c0a09-tigera-ca-bundle\") pod \"calico-kube-controllers-dbdbfd467-d6jdf\" (UID: \"1258f5c1-e9aa-4693-bb82-d25ad59c0a09\") " pod="calico-system/calico-kube-controllers-dbdbfd467-d6jdf" Jul 14 23:32:38.794601 kubelet[2107]: I0714 23:32:38.794504 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pj487\" (UniqueName: \"kubernetes.io/projected/1258f5c1-e9aa-4693-bb82-d25ad59c0a09-kube-api-access-pj487\") pod \"calico-kube-controllers-dbdbfd467-d6jdf\" (UID: \"1258f5c1-e9aa-4693-bb82-d25ad59c0a09\") " pod="calico-system/calico-kube-controllers-dbdbfd467-d6jdf" Jul 14 23:32:38.794601 kubelet[2107]: I0714 23:32:38.794515 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc-whisker-ca-bundle\") pod \"whisker-68f66699fc-x4hjn\" (UID: \"a70a0fd9-ecd0-48c6-88c9-fee4947b61fc\") " pod="calico-system/whisker-68f66699fc-x4hjn" Jul 14 23:32:38.794601 kubelet[2107]: I0714 23:32:38.794528 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/58fd77fd-b503-43f8-b3cb-8485972f220f-calico-apiserver-certs\") pod \"calico-apiserver-7f7ff94-ttkwk\" (UID: \"58fd77fd-b503-43f8-b3cb-8485972f220f\") " pod="calico-apiserver/calico-apiserver-7f7ff94-ttkwk" Jul 14 23:32:38.920185 env[1252]: time="2025-07-14T23:32:38.920124092Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-d6spx,Uid:68f555d2-1b6e-42a2-b3e2-e56e6ab77430,Namespace:kube-system,Attempt:0,}" Jul 14 23:32:38.929047 env[1252]: time="2025-07-14T23:32:38.929028294Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7f7ff94-nzt6j,Uid:aeb17c86-3da8-414a-a622-bb7dd1653fb3,Namespace:calico-apiserver,Attempt:0,}" Jul 14 23:32:38.933975 env[1252]: time="2025-07-14T23:32:38.933934861Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-qchs2,Uid:64b95d63-e1e4-45ae-87ec-9b99781588aa,Namespace:calico-system,Attempt:0,}" Jul 14 23:32:38.939965 env[1252]: time="2025-07-14T23:32:38.939944141Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-svtmh,Uid:50a79248-0bb4-4c89-913f-a33de4da7041,Namespace:kube-system,Attempt:0,}" Jul 14 23:32:38.944950 env[1252]: time="2025-07-14T23:32:38.944932019Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-68f66699fc-x4hjn,Uid:a70a0fd9-ecd0-48c6-88c9-fee4947b61fc,Namespace:calico-system,Attempt:0,}" Jul 14 23:32:38.952434 env[1252]: time="2025-07-14T23:32:38.952190603Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-dbdbfd467-d6jdf,Uid:1258f5c1-e9aa-4693-bb82-d25ad59c0a09,Namespace:calico-system,Attempt:0,}" Jul 14 23:32:38.953508 env[1252]: time="2025-07-14T23:32:38.953490585Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7f7ff94-ttkwk,Uid:58fd77fd-b503-43f8-b3cb-8485972f220f,Namespace:calico-apiserver,Attempt:0,}" Jul 14 23:32:39.326388 systemd[1]: Created slice kubepods-besteffort-pode774804a_35d8_44da_8f27_608495f04638.slice. Jul 14 23:32:39.328226 env[1252]: time="2025-07-14T23:32:39.328202022Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-dgp89,Uid:e774804a-35d8-44da-8f27-608495f04638,Namespace:calico-system,Attempt:0,}" Jul 14 23:32:39.363482 env[1252]: time="2025-07-14T23:32:39.363440976Z" level=error msg="Failed to destroy network for sandbox \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.364031 env[1252]: time="2025-07-14T23:32:39.364006009Z" level=error msg="encountered an error cleaning up failed sandbox \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.364117 env[1252]: time="2025-07-14T23:32:39.364100297Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7f7ff94-ttkwk,Uid:58fd77fd-b503-43f8-b3cb-8485972f220f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.373329 kubelet[2107]: E0714 23:32:39.373237 2107 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.381597 kubelet[2107]: E0714 23:32:39.381529 2107 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7f7ff94-ttkwk" Jul 14 23:32:39.385542 kubelet[2107]: E0714 23:32:39.384411 2107 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7f7ff94-ttkwk" Jul 14 23:32:39.385542 kubelet[2107]: E0714 23:32:39.384473 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7f7ff94-ttkwk_calico-apiserver(58fd77fd-b503-43f8-b3cb-8485972f220f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7f7ff94-ttkwk_calico-apiserver(58fd77fd-b503-43f8-b3cb-8485972f220f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7f7ff94-ttkwk" podUID="58fd77fd-b503-43f8-b3cb-8485972f220f" Jul 14 23:32:39.404248 env[1252]: time="2025-07-14T23:32:39.404213110Z" level=error msg="Failed to destroy network for sandbox \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.405700 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522-shm.mount: Deactivated successfully. Jul 14 23:32:39.406485 env[1252]: time="2025-07-14T23:32:39.406458368Z" level=error msg="encountered an error cleaning up failed sandbox \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.406532 env[1252]: time="2025-07-14T23:32:39.406499702Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-dbdbfd467-d6jdf,Uid:1258f5c1-e9aa-4693-bb82-d25ad59c0a09,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.407258 kubelet[2107]: E0714 23:32:39.406666 2107 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.407258 kubelet[2107]: E0714 23:32:39.406699 2107 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-dbdbfd467-d6jdf" Jul 14 23:32:39.407258 kubelet[2107]: E0714 23:32:39.406713 2107 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-dbdbfd467-d6jdf" Jul 14 23:32:39.407373 kubelet[2107]: E0714 23:32:39.406737 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-dbdbfd467-d6jdf_calico-system(1258f5c1-e9aa-4693-bb82-d25ad59c0a09)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-dbdbfd467-d6jdf_calico-system(1258f5c1-e9aa-4693-bb82-d25ad59c0a09)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-dbdbfd467-d6jdf" podUID="1258f5c1-e9aa-4693-bb82-d25ad59c0a09" Jul 14 23:32:39.415728 env[1252]: time="2025-07-14T23:32:39.415690178Z" level=error msg="Failed to destroy network for sandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.418674 env[1252]: time="2025-07-14T23:32:39.417798735Z" level=error msg="encountered an error cleaning up failed sandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.418674 env[1252]: time="2025-07-14T23:32:39.417832972Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7f7ff94-nzt6j,Uid:aeb17c86-3da8-414a-a622-bb7dd1653fb3,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.418770 kubelet[2107]: E0714 23:32:39.417965 2107 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.418770 kubelet[2107]: E0714 23:32:39.418002 2107 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7f7ff94-nzt6j" Jul 14 23:32:39.418770 kubelet[2107]: E0714 23:32:39.418015 2107 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7f7ff94-nzt6j" Jul 14 23:32:39.417099 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd-shm.mount: Deactivated successfully. Jul 14 23:32:39.419909 kubelet[2107]: E0714 23:32:39.418060 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7f7ff94-nzt6j_calico-apiserver(aeb17c86-3da8-414a-a622-bb7dd1653fb3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7f7ff94-nzt6j_calico-apiserver(aeb17c86-3da8-414a-a622-bb7dd1653fb3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7f7ff94-nzt6j" podUID="aeb17c86-3da8-414a-a622-bb7dd1653fb3" Jul 14 23:32:39.434592 env[1252]: time="2025-07-14T23:32:39.434551035Z" level=error msg="Failed to destroy network for sandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.436030 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad-shm.mount: Deactivated successfully. Jul 14 23:32:39.436900 env[1252]: time="2025-07-14T23:32:39.436763409Z" level=error msg="encountered an error cleaning up failed sandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.436900 env[1252]: time="2025-07-14T23:32:39.436799766Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-qchs2,Uid:64b95d63-e1e4-45ae-87ec-9b99781588aa,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.437664 kubelet[2107]: E0714 23:32:39.437039 2107 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.437664 kubelet[2107]: E0714 23:32:39.437085 2107 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-qchs2" Jul 14 23:32:39.437664 kubelet[2107]: E0714 23:32:39.437104 2107 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-qchs2" Jul 14 23:32:39.437763 kubelet[2107]: E0714 23:32:39.437128 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-qchs2_calico-system(64b95d63-e1e4-45ae-87ec-9b99781588aa)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-qchs2_calico-system(64b95d63-e1e4-45ae-87ec-9b99781588aa)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-qchs2" podUID="64b95d63-e1e4-45ae-87ec-9b99781588aa" Jul 14 23:32:39.446463 env[1252]: time="2025-07-14T23:32:39.446429477Z" level=error msg="Failed to destroy network for sandbox \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.447916 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258-shm.mount: Deactivated successfully. Jul 14 23:32:39.449904 env[1252]: time="2025-07-14T23:32:39.449821255Z" level=error msg="encountered an error cleaning up failed sandbox \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.450465 env[1252]: time="2025-07-14T23:32:39.450446007Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-68f66699fc-x4hjn,Uid:a70a0fd9-ecd0-48c6-88c9-fee4947b61fc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.451094 kubelet[2107]: E0714 23:32:39.450652 2107 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.451094 kubelet[2107]: E0714 23:32:39.450689 2107 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-68f66699fc-x4hjn" Jul 14 23:32:39.451094 kubelet[2107]: E0714 23:32:39.450704 2107 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-68f66699fc-x4hjn" Jul 14 23:32:39.451188 kubelet[2107]: E0714 23:32:39.450728 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-68f66699fc-x4hjn_calico-system(a70a0fd9-ecd0-48c6-88c9-fee4947b61fc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-68f66699fc-x4hjn_calico-system(a70a0fd9-ecd0-48c6-88c9-fee4947b61fc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-68f66699fc-x4hjn" podUID="a70a0fd9-ecd0-48c6-88c9-fee4947b61fc" Jul 14 23:32:39.456314 env[1252]: time="2025-07-14T23:32:39.456286118Z" level=error msg="Failed to destroy network for sandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.457487 env[1252]: time="2025-07-14T23:32:39.457467756Z" level=error msg="encountered an error cleaning up failed sandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.457582 env[1252]: time="2025-07-14T23:32:39.457555748Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-svtmh,Uid:50a79248-0bb4-4c89-913f-a33de4da7041,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.458221 kubelet[2107]: E0714 23:32:39.457724 2107 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.458221 kubelet[2107]: E0714 23:32:39.457755 2107 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-svtmh" Jul 14 23:32:39.458221 kubelet[2107]: E0714 23:32:39.457769 2107 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-svtmh" Jul 14 23:32:39.458311 kubelet[2107]: E0714 23:32:39.457792 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-svtmh_kube-system(50a79248-0bb4-4c89-913f-a33de4da7041)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-svtmh_kube-system(50a79248-0bb4-4c89-913f-a33de4da7041)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-svtmh" podUID="50a79248-0bb4-4c89-913f-a33de4da7041" Jul 14 23:32:39.462043 env[1252]: time="2025-07-14T23:32:39.462007484Z" level=error msg="Failed to destroy network for sandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.462260 env[1252]: time="2025-07-14T23:32:39.462239979Z" level=error msg="encountered an error cleaning up failed sandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.462959 env[1252]: time="2025-07-14T23:32:39.462276371Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-d6spx,Uid:68f555d2-1b6e-42a2-b3e2-e56e6ab77430,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.462991 kubelet[2107]: E0714 23:32:39.462395 2107 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.462991 kubelet[2107]: E0714 23:32:39.462424 2107 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-d6spx" Jul 14 23:32:39.462991 kubelet[2107]: E0714 23:32:39.462440 2107 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-d6spx" Jul 14 23:32:39.463085 kubelet[2107]: E0714 23:32:39.462464 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-d6spx_kube-system(68f555d2-1b6e-42a2-b3e2-e56e6ab77430)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-d6spx_kube-system(68f555d2-1b6e-42a2-b3e2-e56e6ab77430)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-d6spx" podUID="68f555d2-1b6e-42a2-b3e2-e56e6ab77430" Jul 14 23:32:39.469349 env[1252]: time="2025-07-14T23:32:39.469305588Z" level=error msg="Failed to destroy network for sandbox \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.469588 env[1252]: time="2025-07-14T23:32:39.469563920Z" level=error msg="encountered an error cleaning up failed sandbox \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.469620 env[1252]: time="2025-07-14T23:32:39.469600877Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-dgp89,Uid:e774804a-35d8-44da-8f27-608495f04638,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.470282 kubelet[2107]: E0714 23:32:39.469730 2107 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.470282 kubelet[2107]: E0714 23:32:39.469762 2107 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-dgp89" Jul 14 23:32:39.470282 kubelet[2107]: E0714 23:32:39.469778 2107 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-dgp89" Jul 14 23:32:39.470383 kubelet[2107]: E0714 23:32:39.469806 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-dgp89_calico-system(e774804a-35d8-44da-8f27-608495f04638)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-dgp89_calico-system(e774804a-35d8-44da-8f27-608495f04638)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-dgp89" podUID="e774804a-35d8-44da-8f27-608495f04638" Jul 14 23:32:39.501963 kubelet[2107]: I0714 23:32:39.501926 2107 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" Jul 14 23:32:39.504487 kubelet[2107]: I0714 23:32:39.504347 2107 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:32:39.516509 kubelet[2107]: I0714 23:32:39.515737 2107 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:32:39.517842 kubelet[2107]: I0714 23:32:39.517777 2107 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" Jul 14 23:32:39.520044 kubelet[2107]: I0714 23:32:39.519539 2107 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:32:39.520447 env[1252]: time="2025-07-14T23:32:39.520232347Z" level=info msg="StopPodSandbox for \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\"" Jul 14 23:32:39.520587 env[1252]: time="2025-07-14T23:32:39.520573669Z" level=info msg="StopPodSandbox for \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\"" Jul 14 23:32:39.521046 env[1252]: time="2025-07-14T23:32:39.521015228Z" level=info msg="StopPodSandbox for \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\"" Jul 14 23:32:39.521481 env[1252]: time="2025-07-14T23:32:39.521467676Z" level=info msg="StopPodSandbox for \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\"" Jul 14 23:32:39.521768 env[1252]: time="2025-07-14T23:32:39.521751084Z" level=info msg="StopPodSandbox for \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\"" Jul 14 23:32:39.522305 kubelet[2107]: I0714 23:32:39.522291 2107 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" Jul 14 23:32:39.523182 env[1252]: time="2025-07-14T23:32:39.523162402Z" level=info msg="StopPodSandbox for \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\"" Jul 14 23:32:39.524260 kubelet[2107]: I0714 23:32:39.524245 2107 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:32:39.525000 env[1252]: time="2025-07-14T23:32:39.524604032Z" level=info msg="StopPodSandbox for \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\"" Jul 14 23:32:39.525282 kubelet[2107]: I0714 23:32:39.525267 2107 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" Jul 14 23:32:39.525705 env[1252]: time="2025-07-14T23:32:39.525537935Z" level=info msg="StopPodSandbox for \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\"" Jul 14 23:32:39.551544 env[1252]: time="2025-07-14T23:32:39.551507881Z" level=error msg="StopPodSandbox for \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\" failed" error="failed to destroy network for sandbox \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.551689 kubelet[2107]: E0714 23:32:39.551657 2107 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" Jul 14 23:32:39.551735 kubelet[2107]: E0714 23:32:39.551704 2107 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258"} Jul 14 23:32:39.551759 kubelet[2107]: E0714 23:32:39.551752 2107 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a70a0fd9-ecd0-48c6-88c9-fee4947b61fc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:32:39.551804 kubelet[2107]: E0714 23:32:39.551767 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a70a0fd9-ecd0-48c6-88c9-fee4947b61fc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-68f66699fc-x4hjn" podUID="a70a0fd9-ecd0-48c6-88c9-fee4947b61fc" Jul 14 23:32:39.566450 env[1252]: time="2025-07-14T23:32:39.566410326Z" level=error msg="StopPodSandbox for \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\" failed" error="failed to destroy network for sandbox \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.566717 kubelet[2107]: E0714 23:32:39.566683 2107 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" Jul 14 23:32:39.566775 kubelet[2107]: E0714 23:32:39.566725 2107 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522"} Jul 14 23:32:39.566803 kubelet[2107]: E0714 23:32:39.566777 2107 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1258f5c1-e9aa-4693-bb82-d25ad59c0a09\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:32:39.566851 kubelet[2107]: E0714 23:32:39.566802 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1258f5c1-e9aa-4693-bb82-d25ad59c0a09\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-dbdbfd467-d6jdf" podUID="1258f5c1-e9aa-4693-bb82-d25ad59c0a09" Jul 14 23:32:39.587139 env[1252]: time="2025-07-14T23:32:39.587053310Z" level=error msg="StopPodSandbox for \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\" failed" error="failed to destroy network for sandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.588562 kubelet[2107]: E0714 23:32:39.588531 2107 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:32:39.588616 kubelet[2107]: E0714 23:32:39.588571 2107 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de"} Jul 14 23:32:39.588616 kubelet[2107]: E0714 23:32:39.588593 2107 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"68f555d2-1b6e-42a2-b3e2-e56e6ab77430\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:32:39.588700 kubelet[2107]: E0714 23:32:39.588614 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"68f555d2-1b6e-42a2-b3e2-e56e6ab77430\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-d6spx" podUID="68f555d2-1b6e-42a2-b3e2-e56e6ab77430" Jul 14 23:32:39.597281 env[1252]: time="2025-07-14T23:32:39.597242303Z" level=error msg="StopPodSandbox for \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\" failed" error="failed to destroy network for sandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.597549 kubelet[2107]: E0714 23:32:39.597513 2107 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:32:39.597595 kubelet[2107]: E0714 23:32:39.597559 2107 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad"} Jul 14 23:32:39.597595 kubelet[2107]: E0714 23:32:39.597580 2107 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"64b95d63-e1e4-45ae-87ec-9b99781588aa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:32:39.597665 kubelet[2107]: E0714 23:32:39.597595 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"64b95d63-e1e4-45ae-87ec-9b99781588aa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-qchs2" podUID="64b95d63-e1e4-45ae-87ec-9b99781588aa" Jul 14 23:32:39.598143 env[1252]: time="2025-07-14T23:32:39.598126384Z" level=error msg="StopPodSandbox for \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\" failed" error="failed to destroy network for sandbox \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.598388 kubelet[2107]: E0714 23:32:39.598365 2107 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" Jul 14 23:32:39.598427 kubelet[2107]: E0714 23:32:39.598390 2107 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1"} Jul 14 23:32:39.598427 kubelet[2107]: E0714 23:32:39.598405 2107 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"58fd77fd-b503-43f8-b3cb-8485972f220f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:32:39.598486 kubelet[2107]: E0714 23:32:39.598416 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"58fd77fd-b503-43f8-b3cb-8485972f220f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7f7ff94-ttkwk" podUID="58fd77fd-b503-43f8-b3cb-8485972f220f" Jul 14 23:32:39.602403 env[1252]: time="2025-07-14T23:32:39.602375851Z" level=error msg="StopPodSandbox for \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\" failed" error="failed to destroy network for sandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.602508 kubelet[2107]: E0714 23:32:39.602489 2107 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:32:39.602547 kubelet[2107]: E0714 23:32:39.602524 2107 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27"} Jul 14 23:32:39.602579 kubelet[2107]: E0714 23:32:39.602546 2107 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"50a79248-0bb4-4c89-913f-a33de4da7041\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:32:39.602579 kubelet[2107]: E0714 23:32:39.602559 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"50a79248-0bb4-4c89-913f-a33de4da7041\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-svtmh" podUID="50a79248-0bb4-4c89-913f-a33de4da7041" Jul 14 23:32:39.614583 env[1252]: time="2025-07-14T23:32:39.614548681Z" level=error msg="StopPodSandbox for \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\" failed" error="failed to destroy network for sandbox \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.614741 kubelet[2107]: E0714 23:32:39.614700 2107 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" Jul 14 23:32:39.614792 kubelet[2107]: E0714 23:32:39.614748 2107 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9"} Jul 14 23:32:39.614792 kubelet[2107]: E0714 23:32:39.614771 2107 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e774804a-35d8-44da-8f27-608495f04638\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:32:39.614867 kubelet[2107]: E0714 23:32:39.614784 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e774804a-35d8-44da-8f27-608495f04638\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-dgp89" podUID="e774804a-35d8-44da-8f27-608495f04638" Jul 14 23:32:39.615261 env[1252]: time="2025-07-14T23:32:39.615236530Z" level=error msg="StopPodSandbox for \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\" failed" error="failed to destroy network for sandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:32:39.615333 kubelet[2107]: E0714 23:32:39.615314 2107 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:32:39.615377 kubelet[2107]: E0714 23:32:39.615333 2107 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd"} Jul 14 23:32:39.615377 kubelet[2107]: E0714 23:32:39.615346 2107 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"aeb17c86-3da8-414a-a622-bb7dd1653fb3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:32:39.615440 kubelet[2107]: E0714 23:32:39.615377 2107 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"aeb17c86-3da8-414a-a622-bb7dd1653fb3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7f7ff94-nzt6j" podUID="aeb17c86-3da8-414a-a622-bb7dd1653fb3" Jul 14 23:32:40.365881 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9-shm.mount: Deactivated successfully. Jul 14 23:32:40.365946 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27-shm.mount: Deactivated successfully. Jul 14 23:32:40.365994 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de-shm.mount: Deactivated successfully. Jul 14 23:32:46.005525 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount986395534.mount: Deactivated successfully. Jul 14 23:32:46.098748 env[1252]: time="2025-07-14T23:32:46.098721124Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:46.101017 env[1252]: time="2025-07-14T23:32:46.100346018Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:46.102029 env[1252]: time="2025-07-14T23:32:46.102015064Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:46.104679 env[1252]: time="2025-07-14T23:32:46.104662797Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:46.104901 env[1252]: time="2025-07-14T23:32:46.104886405Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 14 23:32:46.145788 env[1252]: time="2025-07-14T23:32:46.145760994Z" level=info msg="CreateContainer within sandbox \"17a300bbead671cd3b54b5e510914811d6bceffa15c48e90341b93f9d4ab7dbc\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 14 23:32:46.153763 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1082054032.mount: Deactivated successfully. Jul 14 23:32:46.155827 env[1252]: time="2025-07-14T23:32:46.155805735Z" level=info msg="CreateContainer within sandbox \"17a300bbead671cd3b54b5e510914811d6bceffa15c48e90341b93f9d4ab7dbc\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"625973b2cda1e64edcbc3b9ae77933df7dcc0294c07c61cf5727c8c084249683\"" Jul 14 23:32:46.157658 env[1252]: time="2025-07-14T23:32:46.157044923Z" level=info msg="StartContainer for \"625973b2cda1e64edcbc3b9ae77933df7dcc0294c07c61cf5727c8c084249683\"" Jul 14 23:32:46.170722 systemd[1]: Started cri-containerd-625973b2cda1e64edcbc3b9ae77933df7dcc0294c07c61cf5727c8c084249683.scope. Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.204331 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 14 23:32:46.206956 kernel: audit: type=1400 audit(1752535966.186:1012): avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.207001 kernel: audit: type=1300 audit(1752535966.186:1012): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f63c175d068 items=0 ppid=2540 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:46.207730 kernel: audit: type=1327 audit(1752535966.186:1012): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353937336232636461316536346564636263336239616537373933 Jul 14 23:32:46.207753 kernel: audit: type=1400 audit(1752535966.186:1013): avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.207769 kernel: audit: type=1400 audit(1752535966.186:1013): avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.208662 kernel: audit: type=1400 audit(1752535966.186:1013): avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f63c175d068 items=0 ppid=2540 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:46.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353937336232636461316536346564636263336239616537373933 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.212393 kernel: audit: type=1400 audit(1752535966.186:1013): avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.212437 kernel: audit: type=1400 audit(1752535966.186:1013): avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.217371 kernel: audit: type=1400 audit(1752535966.186:1013): avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.220394 kernel: audit: type=1400 audit(1752535966.186:1013): avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit: BPF prog-id=133 op=LOAD Jul 14 23:32:46.186000 audit[3210]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0003ce1c8 items=0 ppid=2540 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:46.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353937336232636461316536346564636263336239616537373933 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit: BPF prog-id=134 op=LOAD Jul 14 23:32:46.186000 audit[3210]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0003ce218 items=0 ppid=2540 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:46.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353937336232636461316536346564636263336239616537373933 Jul 14 23:32:46.186000 audit: BPF prog-id=134 op=UNLOAD Jul 14 23:32:46.186000 audit: BPF prog-id=133 op=UNLOAD Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { perfmon } for pid=3210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit[3210]: AVC avc: denied { bpf } for pid=3210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:46.186000 audit: BPF prog-id=135 op=LOAD Jul 14 23:32:46.186000 audit[3210]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0003ce2a8 items=0 ppid=2540 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:46.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353937336232636461316536346564636263336239616537373933 Jul 14 23:32:46.222782 env[1252]: time="2025-07-14T23:32:46.222754828Z" level=info msg="StartContainer for \"625973b2cda1e64edcbc3b9ae77933df7dcc0294c07c61cf5727c8c084249683\" returns successfully" Jul 14 23:32:46.715475 kubelet[2107]: I0714 23:32:46.715423 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-j77n6" podStartSLOduration=1.678828457 podStartE2EDuration="20.714330111s" podCreationTimestamp="2025-07-14 23:32:26 +0000 UTC" firstStartedPulling="2025-07-14 23:32:27.077926984 +0000 UTC m=+18.959857768" lastFinishedPulling="2025-07-14 23:32:46.113428637 +0000 UTC m=+37.995359422" observedRunningTime="2025-07-14 23:32:46.712089766 +0000 UTC m=+38.594020567" watchObservedRunningTime="2025-07-14 23:32:46.714330111 +0000 UTC m=+38.596260912" Jul 14 23:32:46.818710 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 14 23:32:46.818846 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 14 23:32:47.309091 env[1252]: time="2025-07-14T23:32:47.309057664Z" level=info msg="StopPodSandbox for \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\"" Jul 14 23:32:47.644675 systemd[1]: run-containerd-runc-k8s.io-625973b2cda1e64edcbc3b9ae77933df7dcc0294c07c61cf5727c8c084249683-runc.MWUJ3H.mount: Deactivated successfully. Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.385 [INFO][3286] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.386 [INFO][3286] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" iface="eth0" netns="/var/run/netns/cni-24f4f69d-b8e2-43c5-be64-ce98952150b0" Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.386 [INFO][3286] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" iface="eth0" netns="/var/run/netns/cni-24f4f69d-b8e2-43c5-be64-ce98952150b0" Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.387 [INFO][3286] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" iface="eth0" netns="/var/run/netns/cni-24f4f69d-b8e2-43c5-be64-ce98952150b0" Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.387 [INFO][3286] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.387 [INFO][3286] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.684 [INFO][3304] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" HandleID="k8s-pod-network.9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" Workload="localhost-k8s-whisker--68f66699fc--x4hjn-eth0" Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.688 [INFO][3304] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.688 [INFO][3304] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.702 [WARNING][3304] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" HandleID="k8s-pod-network.9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" Workload="localhost-k8s-whisker--68f66699fc--x4hjn-eth0" Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.702 [INFO][3304] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" HandleID="k8s-pod-network.9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" Workload="localhost-k8s-whisker--68f66699fc--x4hjn-eth0" Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.703 [INFO][3304] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:47.706370 env[1252]: 2025-07-14 23:32:47.704 [INFO][3286] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258" Jul 14 23:32:47.708123 systemd[1]: run-netns-cni\x2d24f4f69d\x2db8e2\x2d43c5\x2dbe64\x2dce98952150b0.mount: Deactivated successfully. Jul 14 23:32:47.708427 env[1252]: time="2025-07-14T23:32:47.708403181Z" level=info msg="TearDown network for sandbox \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\" successfully" Jul 14 23:32:47.709185 env[1252]: time="2025-07-14T23:32:47.708476521Z" level=info msg="StopPodSandbox for \"9b21fe379238fac40a15fe140e2e0f5358c28a3c2aba046a500f690b64dae258\" returns successfully" Jul 14 23:32:47.875399 kubelet[2107]: I0714 23:32:47.875374 2107 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-f7887\" (UniqueName: \"kubernetes.io/projected/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc-kube-api-access-f7887\") pod \"a70a0fd9-ecd0-48c6-88c9-fee4947b61fc\" (UID: \"a70a0fd9-ecd0-48c6-88c9-fee4947b61fc\") " Jul 14 23:32:47.875906 kubelet[2107]: I0714 23:32:47.875641 2107 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc-whisker-backend-key-pair\") pod \"a70a0fd9-ecd0-48c6-88c9-fee4947b61fc\" (UID: \"a70a0fd9-ecd0-48c6-88c9-fee4947b61fc\") " Jul 14 23:32:47.875906 kubelet[2107]: I0714 23:32:47.875657 2107 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc-whisker-ca-bundle\") pod \"a70a0fd9-ecd0-48c6-88c9-fee4947b61fc\" (UID: \"a70a0fd9-ecd0-48c6-88c9-fee4947b61fc\") " Jul 14 23:32:47.886332 kubelet[2107]: I0714 23:32:47.883344 2107 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "a70a0fd9-ecd0-48c6-88c9-fee4947b61fc" (UID: "a70a0fd9-ecd0-48c6-88c9-fee4947b61fc"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 14 23:32:47.886589 kubelet[2107]: I0714 23:32:47.886575 2107 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "a70a0fd9-ecd0-48c6-88c9-fee4947b61fc" (UID: "a70a0fd9-ecd0-48c6-88c9-fee4947b61fc"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 14 23:32:47.887959 kubelet[2107]: I0714 23:32:47.887946 2107 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc-kube-api-access-f7887" (OuterVolumeSpecName: "kube-api-access-f7887") pod "a70a0fd9-ecd0-48c6-88c9-fee4947b61fc" (UID: "a70a0fd9-ecd0-48c6-88c9-fee4947b61fc"). InnerVolumeSpecName "kube-api-access-f7887". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 14 23:32:47.976254 kubelet[2107]: I0714 23:32:47.976182 2107 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-f7887\" (UniqueName: \"kubernetes.io/projected/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc-kube-api-access-f7887\") on node \"localhost\" DevicePath \"\"" Jul 14 23:32:47.976395 kubelet[2107]: I0714 23:32:47.976386 2107 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 14 23:32:47.977804 kubelet[2107]: I0714 23:32:47.976783 2107 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 14 23:32:48.005642 systemd[1]: var-lib-kubelet-pods-a70a0fd9\x2decd0\x2d48c6\x2d88c9\x2dfee4947b61fc-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2df7887.mount: Deactivated successfully. Jul 14 23:32:48.005718 systemd[1]: var-lib-kubelet-pods-a70a0fd9\x2decd0\x2d48c6\x2d88c9\x2dfee4947b61fc-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 14 23:32:48.336657 systemd[1]: Removed slice kubepods-besteffort-poda70a0fd9_ecd0_48c6_88c9_fee4947b61fc.slice. Jul 14 23:32:48.414000 audit[3390]: AVC avc: denied { write } for pid=3390 comm="tee" name="fd" dev="proc" ino=36449 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:32:48.414000 audit[3390]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdd32537f2 a2=241 a3=1b6 items=1 ppid=3348 pid=3390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.414000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 14 23:32:48.414000 audit: PATH item=0 name="/dev/fd/63" inode=36425 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:32:48.414000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:32:48.415000 audit[3392]: AVC avc: denied { write } for pid=3392 comm="tee" name="fd" dev="proc" ino=36453 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:32:48.415000 audit[3392]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe990077f1 a2=241 a3=1b6 items=1 ppid=3347 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.415000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 14 23:32:48.415000 audit: PATH item=0 name="/dev/fd/63" inode=36426 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:32:48.415000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:32:48.416000 audit[3394]: AVC avc: denied { write } for pid=3394 comm="tee" name="fd" dev="proc" ino=36457 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:32:48.416000 audit[3394]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff6df957e2 a2=241 a3=1b6 items=1 ppid=3344 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.416000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 14 23:32:48.416000 audit: PATH item=0 name="/dev/fd/63" inode=36431 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:32:48.416000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:32:48.418000 audit[3400]: AVC avc: denied { write } for pid=3400 comm="tee" name="fd" dev="proc" ino=36463 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:32:48.418000 audit[3400]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc2cd917e1 a2=241 a3=1b6 items=1 ppid=3354 pid=3400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.418000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 14 23:32:48.418000 audit: PATH item=0 name="/dev/fd/63" inode=36439 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:32:48.418000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:32:48.426000 audit[3397]: AVC avc: denied { write } for pid=3397 comm="tee" name="fd" dev="proc" ino=36469 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:32:48.426000 audit[3397]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff8e6357f1 a2=241 a3=1b6 items=1 ppid=3350 pid=3397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.426000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 14 23:32:48.426000 audit: PATH item=0 name="/dev/fd/63" inode=37179 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:32:48.426000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:32:48.435000 audit[3408]: AVC avc: denied { write } for pid=3408 comm="tee" name="fd" dev="proc" ino=36475 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:32:48.435000 audit[3408]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffddcea37f1 a2=241 a3=1b6 items=1 ppid=3342 pid=3408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.435000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 14 23:32:48.435000 audit: PATH item=0 name="/dev/fd/63" inode=37183 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:32:48.435000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:32:48.454000 audit[3416]: AVC avc: denied { write } for pid=3416 comm="tee" name="fd" dev="proc" ino=37191 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:32:48.454000 audit[3416]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe1f9807f3 a2=241 a3=1b6 items=1 ppid=3345 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.454000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 14 23:32:48.454000 audit: PATH item=0 name="/dev/fd/63" inode=37185 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:32:48.454000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:32:48.614000 audit[3446]: AVC avc: denied { bpf } for pid=3446 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.614000 audit[3446]: AVC avc: denied { bpf } for pid=3446 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.614000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.614000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.614000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.614000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.614000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.614000 audit[3446]: AVC avc: denied { bpf } for pid=3446 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.614000 audit[3446]: AVC avc: denied { bpf } for pid=3446 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.614000 audit: BPF prog-id=136 op=LOAD Jul 14 23:32:48.614000 audit[3446]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc6c353580 a2=98 a3=1fffffffffffffff items=0 ppid=3343 pid=3446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.614000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:32:48.615000 audit: BPF prog-id=136 op=UNLOAD Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { bpf } for pid=3446 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { bpf } for pid=3446 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { bpf } for pid=3446 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { bpf } for pid=3446 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit: BPF prog-id=137 op=LOAD Jul 14 23:32:48.616000 audit[3446]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc6c353460 a2=94 a3=3 items=0 ppid=3343 pid=3446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.616000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:32:48.616000 audit: BPF prog-id=137 op=UNLOAD Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { bpf } for pid=3446 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { bpf } for pid=3446 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { bpf } for pid=3446 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { bpf } for pid=3446 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit: BPF prog-id=138 op=LOAD Jul 14 23:32:48.616000 audit[3446]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc6c3534a0 a2=94 a3=7ffc6c353680 items=0 ppid=3343 pid=3446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.616000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:32:48.616000 audit: BPF prog-id=138 op=UNLOAD Jul 14 23:32:48.616000 audit[3446]: AVC avc: denied { perfmon } for pid=3446 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.616000 audit[3446]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffc6c353570 a2=50 a3=a000000085 items=0 ppid=3343 pid=3446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.616000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:32:48.619000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.619000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.619000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.619000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.619000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.619000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.619000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.619000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.619000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.619000 audit: BPF prog-id=139 op=LOAD Jul 14 23:32:48.619000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe8b97a2a0 a2=98 a3=3 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.619000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.619000 audit: BPF prog-id=139 op=UNLOAD Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit: BPF prog-id=140 op=LOAD Jul 14 23:32:48.620000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe8b97a090 a2=94 a3=54428f items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.620000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.620000 audit: BPF prog-id=140 op=UNLOAD Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.620000 audit: BPF prog-id=141 op=LOAD Jul 14 23:32:48.620000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe8b97a0c0 a2=94 a3=2 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.620000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.620000 audit: BPF prog-id=141 op=UNLOAD Jul 14 23:32:48.725000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.725000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.725000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.725000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.725000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.725000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.725000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.725000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.725000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.725000 audit: BPF prog-id=142 op=LOAD Jul 14 23:32:48.725000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe8b979f80 a2=94 a3=1 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.725000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.726000 audit: BPF prog-id=142 op=UNLOAD Jul 14 23:32:48.726000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.726000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe8b97a050 a2=50 a3=7ffe8b97a130 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.726000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737800 kubelet[2107]: I0714 23:32:48.737764 2107 status_manager.go:890] "Failed to get status for pod" podUID="b1a8b518-0605-49ca-b1d5-12bee29dbac1" pod="calico-system/whisker-7b5b449f6c-n9cnc" err="pods \"whisker-7b5b449f6c-n9cnc\" is forbidden: User \"system:node:localhost\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" Jul 14 23:32:48.736000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.736000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe8b979f90 a2=28 a3=0 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.736000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.736000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.736000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe8b979fc0 a2=28 a3=0 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.736000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe8b979ed0 a2=28 a3=0 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe8b979fe0 a2=28 a3=0 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe8b979fc0 a2=28 a3=0 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe8b979fb0 a2=28 a3=0 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe8b979fe0 a2=28 a3=0 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe8b979fc0 a2=28 a3=0 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe8b979fe0 a2=28 a3=0 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe8b979fb0 a2=28 a3=0 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe8b97a020 a2=28 a3=0 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe8b979dd0 a2=50 a3=1 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit: BPF prog-id=143 op=LOAD Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe8b979dd0 a2=94 a3=5 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit: BPF prog-id=143 op=UNLOAD Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe8b979e80 a2=50 a3=1 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffe8b979fa0 a2=4 a3=38 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.737000 audit[3453]: AVC avc: denied { confidentiality } for pid=3453 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:32:48.737000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe8b979ff0 a2=94 a3=6 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { confidentiality } for pid=3453 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:32:48.738000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe8b9797a0 a2=94 a3=88 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.738000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.738000 audit[3453]: AVC avc: denied { confidentiality } for pid=3453 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:32:48.738000 audit[3453]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe8b9797a0 a2=94 a3=88 items=0 ppid=3343 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.738000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:32:48.741966 systemd[1]: Created slice kubepods-besteffort-podb1a8b518_0605_49ca_b1d5_12bee29dbac1.slice. Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit: BPF prog-id=144 op=LOAD Jul 14 23:32:48.749000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffebe509ff0 a2=98 a3=1999999999999999 items=0 ppid=3343 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.749000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 23:32:48.749000 audit: BPF prog-id=144 op=UNLOAD Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit: BPF prog-id=145 op=LOAD Jul 14 23:32:48.749000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffebe509ed0 a2=94 a3=ffff items=0 ppid=3343 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.749000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 23:32:48.749000 audit: BPF prog-id=145 op=UNLOAD Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.749000 audit: BPF prog-id=146 op=LOAD Jul 14 23:32:48.749000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffebe509f10 a2=94 a3=7ffebe50a0f0 items=0 ppid=3343 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.749000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 23:32:48.749000 audit: BPF prog-id=146 op=UNLOAD Jul 14 23:32:48.804100 systemd-networkd[1061]: vxlan.calico: Link UP Jul 14 23:32:48.804104 systemd-networkd[1061]: vxlan.calico: Gained carrier Jul 14 23:32:48.822000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.822000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.822000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.822000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.822000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.822000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.822000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.822000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.822000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.822000 audit: BPF prog-id=147 op=LOAD Jul 14 23:32:48.822000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff1a9d6320 a2=98 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.822000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.823000 audit: BPF prog-id=147 op=UNLOAD Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit: BPF prog-id=148 op=LOAD Jul 14 23:32:48.824000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff1a9d6130 a2=94 a3=54428f items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.824000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.824000 audit: BPF prog-id=148 op=UNLOAD Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.824000 audit: BPF prog-id=149 op=LOAD Jul 14 23:32:48.824000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff1a9d6160 a2=94 a3=2 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.824000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.824000 audit: BPF prog-id=149 op=UNLOAD Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff1a9d6030 a2=28 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff1a9d6060 a2=28 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff1a9d5f70 a2=28 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff1a9d6080 a2=28 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff1a9d6060 a2=28 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff1a9d6050 a2=28 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff1a9d6080 a2=28 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff1a9d6060 a2=28 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff1a9d6080 a2=28 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff1a9d6050 a2=28 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff1a9d60c0 a2=28 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit: BPF prog-id=150 op=LOAD Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff1a9d5f30 a2=94 a3=0 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.825000 audit: BPF prog-id=150 op=UNLOAD Jul 14 23:32:48.825000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.825000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff1a9d5f20 a2=50 a3=2800 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fff1a9d5f20 a2=50 a3=2800 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.826000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit: BPF prog-id=151 op=LOAD Jul 14 23:32:48.826000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff1a9d5740 a2=94 a3=2 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.826000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.826000 audit: BPF prog-id=151 op=UNLOAD Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { perfmon } for pid=3485 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit[3485]: AVC avc: denied { bpf } for pid=3485 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.826000 audit: BPF prog-id=152 op=LOAD Jul 14 23:32:48.826000 audit[3485]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff1a9d5840 a2=94 a3=30 items=0 ppid=3343 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.826000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:32:48.829000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.829000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.829000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.829000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.829000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.829000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.829000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.829000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.829000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.829000 audit: BPF prog-id=153 op=LOAD Jul 14 23:32:48.829000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdbc16ff40 a2=98 a3=0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.829000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.830000 audit: BPF prog-id=153 op=UNLOAD Jul 14 23:32:48.830000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.830000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.830000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.830000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.830000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.830000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.830000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.830000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.830000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.830000 audit: BPF prog-id=154 op=LOAD Jul 14 23:32:48.830000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdbc16fd30 a2=94 a3=54428f items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.830000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.831000 audit: BPF prog-id=154 op=UNLOAD Jul 14 23:32:48.831000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.831000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.831000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.831000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.831000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.831000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.831000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.831000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.831000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.831000 audit: BPF prog-id=155 op=LOAD Jul 14 23:32:48.831000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdbc16fd60 a2=94 a3=2 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.831000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.831000 audit: BPF prog-id=155 op=UNLOAD Jul 14 23:32:48.881400 kubelet[2107]: I0714 23:32:48.880821 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b1a8b518-0605-49ca-b1d5-12bee29dbac1-whisker-backend-key-pair\") pod \"whisker-7b5b449f6c-n9cnc\" (UID: \"b1a8b518-0605-49ca-b1d5-12bee29dbac1\") " pod="calico-system/whisker-7b5b449f6c-n9cnc" Jul 14 23:32:48.881400 kubelet[2107]: I0714 23:32:48.880859 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4pgbk\" (UniqueName: \"kubernetes.io/projected/b1a8b518-0605-49ca-b1d5-12bee29dbac1-kube-api-access-4pgbk\") pod \"whisker-7b5b449f6c-n9cnc\" (UID: \"b1a8b518-0605-49ca-b1d5-12bee29dbac1\") " pod="calico-system/whisker-7b5b449f6c-n9cnc" Jul 14 23:32:48.881400 kubelet[2107]: I0714 23:32:48.880879 2107 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b1a8b518-0605-49ca-b1d5-12bee29dbac1-whisker-ca-bundle\") pod \"whisker-7b5b449f6c-n9cnc\" (UID: \"b1a8b518-0605-49ca-b1d5-12bee29dbac1\") " pod="calico-system/whisker-7b5b449f6c-n9cnc" Jul 14 23:32:48.926000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.926000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.926000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.926000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.926000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.926000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.926000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.926000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.926000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.926000 audit: BPF prog-id=156 op=LOAD Jul 14 23:32:48.926000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdbc16fc20 a2=94 a3=1 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.926000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.927000 audit: BPF prog-id=156 op=UNLOAD Jul 14 23:32:48.927000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.927000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffdbc16fcf0 a2=50 a3=7ffdbc16fdd0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.927000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.934000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.934000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdbc16fc30 a2=28 a3=0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.934000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.934000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.934000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdbc16fc60 a2=28 a3=0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.934000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.935000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.935000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdbc16fb70 a2=28 a3=0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.935000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.935000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdbc16fc80 a2=28 a3=0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.935000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.935000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdbc16fc60 a2=28 a3=0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.935000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.935000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdbc16fc50 a2=28 a3=0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.935000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.935000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdbc16fc80 a2=28 a3=0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.935000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.935000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdbc16fc60 a2=28 a3=0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.935000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.935000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdbc16fc80 a2=28 a3=0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.935000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.935000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdbc16fc50 a2=28 a3=0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdbc16fcc0 a2=28 a3=0 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.936000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdbc16fa70 a2=50 a3=1 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.936000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit: BPF prog-id=157 op=LOAD Jul 14 23:32:48.936000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdbc16fa70 a2=94 a3=5 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.936000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.936000 audit: BPF prog-id=157 op=UNLOAD Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdbc16fb20 a2=50 a3=1 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.936000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffdbc16fc40 a2=4 a3=38 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.936000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { confidentiality } for pid=3487 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:32:48.936000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdbc16fc90 a2=94 a3=6 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.936000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { confidentiality } for pid=3487 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:32:48.936000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdbc16f440 a2=94 a3=88 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.936000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.936000 audit[3487]: AVC avc: denied { confidentiality } for pid=3487 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:32:48.936000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdbc16f440 a2=94 a3=88 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.936000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.937000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.937000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdbc170e70 a2=10 a3=f8f00800 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.937000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.937000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.937000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdbc170d10 a2=10 a3=3 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.937000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.937000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.937000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdbc170cb0 a2=10 a3=3 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.937000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.937000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:48.937000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdbc170cb0 a2=10 a3=7 items=0 ppid=3343 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:48.937000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:32:48.948000 audit: BPF prog-id=152 op=UNLOAD Jul 14 23:32:49.020000 audit[3524]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3524 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:32:49.020000 audit[3524]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffe8d37aea0 a2=0 a3=7ffe8d37ae8c items=0 ppid=3343 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:49.020000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:32:49.027000 audit[3522]: NETFILTER_CFG table=raw:102 family=2 entries=21 op=nft_register_chain pid=3522 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:32:49.027000 audit[3522]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffe2b3d14d0 a2=0 a3=7ffe2b3d14bc items=0 ppid=3343 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:49.027000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:32:49.029000 audit[3523]: NETFILTER_CFG table=nat:103 family=2 entries=15 op=nft_register_chain pid=3523 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:32:49.029000 audit[3523]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffc949aa6f0 a2=0 a3=7ffc949aa6dc items=0 ppid=3343 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:49.029000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:32:49.030000 audit[3526]: NETFILTER_CFG table=filter:104 family=2 entries=39 op=nft_register_chain pid=3526 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:32:49.030000 audit[3526]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffddec80b90 a2=0 a3=7ffddec80b7c items=0 ppid=3343 pid=3526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:49.030000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:32:49.047213 env[1252]: time="2025-07-14T23:32:49.047005895Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7b5b449f6c-n9cnc,Uid:b1a8b518-0605-49ca-b1d5-12bee29dbac1,Namespace:calico-system,Attempt:0,}" Jul 14 23:32:49.164677 systemd-networkd[1061]: cali0f8f77e5ac3: Link UP Jul 14 23:32:49.164794 systemd-networkd[1061]: cali0f8f77e5ac3: Gained carrier Jul 14 23:32:49.165973 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0f8f77e5ac3: link becomes ready Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.084 [INFO][3533] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0 whisker-7b5b449f6c- calico-system b1a8b518-0605-49ca-b1d5-12bee29dbac1 876 0 2025-07-14 23:32:48 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:7b5b449f6c projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-7b5b449f6c-n9cnc eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali0f8f77e5ac3 [] [] }} ContainerID="5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" Namespace="calico-system" Pod="whisker-7b5b449f6c-n9cnc" WorkloadEndpoint="localhost-k8s-whisker--7b5b449f6c--n9cnc-" Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.084 [INFO][3533] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" Namespace="calico-system" Pod="whisker-7b5b449f6c-n9cnc" WorkloadEndpoint="localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0" Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.114 [INFO][3546] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" HandleID="k8s-pod-network.5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" Workload="localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0" Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.114 [INFO][3546] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" HandleID="k8s-pod-network.5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" Workload="localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d51f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-7b5b449f6c-n9cnc", "timestamp":"2025-07-14 23:32:49.114171911 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.114 [INFO][3546] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.114 [INFO][3546] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.114 [INFO][3546] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.135 [INFO][3546] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" host="localhost" Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.141 [INFO][3546] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.143 [INFO][3546] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.144 [INFO][3546] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.146 [INFO][3546] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.146 [INFO][3546] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" host="localhost" Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.146 [INFO][3546] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.149 [INFO][3546] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" host="localhost" Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.152 [INFO][3546] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" host="localhost" Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.152 [INFO][3546] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" host="localhost" Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.153 [INFO][3546] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:49.182880 env[1252]: 2025-07-14 23:32:49.153 [INFO][3546] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" HandleID="k8s-pod-network.5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" Workload="localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0" Jul 14 23:32:49.183343 env[1252]: 2025-07-14 23:32:49.157 [INFO][3533] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" Namespace="calico-system" Pod="whisker-7b5b449f6c-n9cnc" WorkloadEndpoint="localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0", GenerateName:"whisker-7b5b449f6c-", Namespace:"calico-system", SelfLink:"", UID:"b1a8b518-0605-49ca-b1d5-12bee29dbac1", ResourceVersion:"876", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7b5b449f6c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-7b5b449f6c-n9cnc", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali0f8f77e5ac3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:49.183343 env[1252]: 2025-07-14 23:32:49.157 [INFO][3533] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" Namespace="calico-system" Pod="whisker-7b5b449f6c-n9cnc" WorkloadEndpoint="localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0" Jul 14 23:32:49.183343 env[1252]: 2025-07-14 23:32:49.158 [INFO][3533] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0f8f77e5ac3 ContainerID="5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" Namespace="calico-system" Pod="whisker-7b5b449f6c-n9cnc" WorkloadEndpoint="localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0" Jul 14 23:32:49.183343 env[1252]: 2025-07-14 23:32:49.166 [INFO][3533] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" Namespace="calico-system" Pod="whisker-7b5b449f6c-n9cnc" WorkloadEndpoint="localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0" Jul 14 23:32:49.183343 env[1252]: 2025-07-14 23:32:49.168 [INFO][3533] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" Namespace="calico-system" Pod="whisker-7b5b449f6c-n9cnc" WorkloadEndpoint="localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0", GenerateName:"whisker-7b5b449f6c-", Namespace:"calico-system", SelfLink:"", UID:"b1a8b518-0605-49ca-b1d5-12bee29dbac1", ResourceVersion:"876", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7b5b449f6c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba", Pod:"whisker-7b5b449f6c-n9cnc", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali0f8f77e5ac3", MAC:"22:f1:00:e8:da:a7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:49.183343 env[1252]: 2025-07-14 23:32:49.181 [INFO][3533] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba" Namespace="calico-system" Pod="whisker-7b5b449f6c-n9cnc" WorkloadEndpoint="localhost-k8s-whisker--7b5b449f6c--n9cnc-eth0" Jul 14 23:32:49.198399 env[1252]: time="2025-07-14T23:32:49.198242926Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:49.198399 env[1252]: time="2025-07-14T23:32:49.198270921Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:49.198399 env[1252]: time="2025-07-14T23:32:49.198277995Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:49.203897 env[1252]: time="2025-07-14T23:32:49.198524740Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba pid=3567 runtime=io.containerd.runc.v2 Jul 14 23:32:49.216770 systemd[1]: Started cri-containerd-5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba.scope. Jul 14 23:32:49.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.230000 audit: BPF prog-id=158 op=LOAD Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3567 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:49.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562613464343939663433613364313034353039366638653537643163 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=3567 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:49.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562613464343939663433613364313034353039366638653537643163 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit: BPF prog-id=159 op=LOAD Jul 14 23:32:49.231000 audit[3580]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c0002abaa0 items=0 ppid=3567 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:49.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562613464343939663433613364313034353039366638653537643163 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit: BPF prog-id=160 op=LOAD Jul 14 23:32:49.231000 audit[3580]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c0002abae8 items=0 ppid=3567 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:49.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562613464343939663433613364313034353039366638653537643163 Jul 14 23:32:49.231000 audit: BPF prog-id=160 op=UNLOAD Jul 14 23:32:49.231000 audit: BPF prog-id=159 op=UNLOAD Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:49.231000 audit: BPF prog-id=161 op=LOAD Jul 14 23:32:49.231000 audit[3580]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c0002abef8 items=0 ppid=3567 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:49.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562613464343939663433613364313034353039366638653537643163 Jul 14 23:32:49.233254 systemd-resolved[1201]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:32:49.235000 audit[3591]: NETFILTER_CFG table=filter:105 family=2 entries=59 op=nft_register_chain pid=3591 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:32:49.235000 audit[3591]: SYSCALL arch=c000003e syscall=46 success=yes exit=35860 a0=3 a1=7ffe0a422320 a2=0 a3=7ffe0a42230c items=0 ppid=3343 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:49.235000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:32:49.263055 env[1252]: time="2025-07-14T23:32:49.263030638Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7b5b449f6c-n9cnc,Uid:b1a8b518-0605-49ca-b1d5-12bee29dbac1,Namespace:calico-system,Attempt:0,} returns sandbox id \"5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba\"" Jul 14 23:32:49.263979 env[1252]: time="2025-07-14T23:32:49.263963752Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 14 23:32:50.328719 kubelet[2107]: I0714 23:32:50.328696 2107 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="a70a0fd9-ecd0-48c6-88c9-fee4947b61fc" path="/var/lib/kubelet/pods/a70a0fd9-ecd0-48c6-88c9-fee4947b61fc/volumes" Jul 14 23:32:50.511469 systemd-networkd[1061]: cali0f8f77e5ac3: Gained IPv6LL Jul 14 23:32:50.575436 systemd-networkd[1061]: vxlan.calico: Gained IPv6LL Jul 14 23:32:50.791099 env[1252]: time="2025-07-14T23:32:50.791057865Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:50.792090 env[1252]: time="2025-07-14T23:32:50.792075260Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:50.792885 env[1252]: time="2025-07-14T23:32:50.792868687Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:50.793782 env[1252]: time="2025-07-14T23:32:50.793766844Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:50.794218 env[1252]: time="2025-07-14T23:32:50.794200780Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 14 23:32:50.798013 env[1252]: time="2025-07-14T23:32:50.797996586Z" level=info msg="CreateContainer within sandbox \"5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 14 23:32:50.806407 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3918900494.mount: Deactivated successfully. Jul 14 23:32:50.810271 env[1252]: time="2025-07-14T23:32:50.810244379Z" level=info msg="CreateContainer within sandbox \"5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"1b19365d4f6995e2721c204a7cd352ac463fabe7530db239a182dec49c77017d\"" Jul 14 23:32:50.811341 env[1252]: time="2025-07-14T23:32:50.811326161Z" level=info msg="StartContainer for \"1b19365d4f6995e2721c204a7cd352ac463fabe7530db239a182dec49c77017d\"" Jul 14 23:32:50.831702 systemd[1]: Started cri-containerd-1b19365d4f6995e2721c204a7cd352ac463fabe7530db239a182dec49c77017d.scope. Jul 14 23:32:50.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit: BPF prog-id=162 op=LOAD Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3567 pid=3621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:50.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313933363564346636393935653237323163323034613763643335 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3567 pid=3621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:50.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313933363564346636393935653237323163323034613763643335 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit: BPF prog-id=163 op=LOAD Jul 14 23:32:50.853000 audit[3621]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000dfd10 items=0 ppid=3567 pid=3621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:50.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313933363564346636393935653237323163323034613763643335 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.853000 audit: BPF prog-id=164 op=LOAD Jul 14 23:32:50.853000 audit[3621]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000dfd58 items=0 ppid=3567 pid=3621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:50.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313933363564346636393935653237323163323034613763643335 Jul 14 23:32:50.854000 audit: BPF prog-id=164 op=UNLOAD Jul 14 23:32:50.854000 audit: BPF prog-id=163 op=UNLOAD Jul 14 23:32:50.854000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.854000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.854000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.854000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.854000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.854000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.854000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.854000 audit[3621]: AVC avc: denied { perfmon } for pid=3621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.854000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.854000 audit[3621]: AVC avc: denied { bpf } for pid=3621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:50.854000 audit: BPF prog-id=165 op=LOAD Jul 14 23:32:50.854000 audit[3621]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c6168 items=0 ppid=3567 pid=3621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:50.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313933363564346636393935653237323163323034613763643335 Jul 14 23:32:50.877007 env[1252]: time="2025-07-14T23:32:50.876983339Z" level=info msg="StartContainer for \"1b19365d4f6995e2721c204a7cd352ac463fabe7530db239a182dec49c77017d\" returns successfully" Jul 14 23:32:50.881175 env[1252]: time="2025-07-14T23:32:50.881120687Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 14 23:32:50.902000 audit[3632]: AVC avc: denied { search } for pid=3632 comm="nginx" name="crypto" dev="proc" ino=38012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c761,c1015 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 14 23:32:50.902000 audit[3632]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f2050ad9728 a2=0 a3=0 items=0 ppid=3567 pid=3632 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c761,c1015 key=(null) Jul 14 23:32:50.902000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 14 23:32:51.324163 env[1252]: time="2025-07-14T23:32:51.324135031Z" level=info msg="StopPodSandbox for \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\"" Jul 14 23:32:51.324436 env[1252]: time="2025-07-14T23:32:51.324420166Z" level=info msg="StopPodSandbox for \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\"" Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.366 [INFO][3670] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.366 [INFO][3670] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" iface="eth0" netns="/var/run/netns/cni-c5bc315e-c2f3-760e-d824-3a827772e9b7" Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.369 [INFO][3670] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" iface="eth0" netns="/var/run/netns/cni-c5bc315e-c2f3-760e-d824-3a827772e9b7" Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.369 [INFO][3670] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" iface="eth0" netns="/var/run/netns/cni-c5bc315e-c2f3-760e-d824-3a827772e9b7" Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.370 [INFO][3670] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.370 [INFO][3670] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.394 [INFO][3683] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" HandleID="k8s-pod-network.576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Workload="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.394 [INFO][3683] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.394 [INFO][3683] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.397 [WARNING][3683] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" HandleID="k8s-pod-network.576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Workload="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.397 [INFO][3683] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" HandleID="k8s-pod-network.576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Workload="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.406 [INFO][3683] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:51.412129 env[1252]: 2025-07-14 23:32:51.407 [INFO][3670] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:32:51.411796 systemd[1]: run-netns-cni\x2dc5bc315e\x2dc2f3\x2d760e\x2dd824\x2d3a827772e9b7.mount: Deactivated successfully. Jul 14 23:32:51.414749 env[1252]: time="2025-07-14T23:32:51.412705324Z" level=info msg="TearDown network for sandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\" successfully" Jul 14 23:32:51.414749 env[1252]: time="2025-07-14T23:32:51.412729321Z" level=info msg="StopPodSandbox for \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\" returns successfully" Jul 14 23:32:51.414749 env[1252]: time="2025-07-14T23:32:51.413178547Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-svtmh,Uid:50a79248-0bb4-4c89-913f-a33de4da7041,Namespace:kube-system,Attempt:1,}" Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.373 [INFO][3671] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.373 [INFO][3671] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" iface="eth0" netns="/var/run/netns/cni-95dd1541-6358-ef44-302a-aabb0f3d10d1" Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.373 [INFO][3671] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" iface="eth0" netns="/var/run/netns/cni-95dd1541-6358-ef44-302a-aabb0f3d10d1" Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.373 [INFO][3671] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" iface="eth0" netns="/var/run/netns/cni-95dd1541-6358-ef44-302a-aabb0f3d10d1" Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.373 [INFO][3671] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.373 [INFO][3671] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.401 [INFO][3689] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" HandleID="k8s-pod-network.7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Workload="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.401 [INFO][3689] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.406 [INFO][3689] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.413 [WARNING][3689] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" HandleID="k8s-pod-network.7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Workload="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.413 [INFO][3689] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" HandleID="k8s-pod-network.7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Workload="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.414 [INFO][3689] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:51.417713 env[1252]: 2025-07-14 23:32:51.416 [INFO][3671] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:32:51.418203 env[1252]: time="2025-07-14T23:32:51.418162613Z" level=info msg="TearDown network for sandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\" successfully" Jul 14 23:32:51.418263 env[1252]: time="2025-07-14T23:32:51.418250981Z" level=info msg="StopPodSandbox for \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\" returns successfully" Jul 14 23:32:51.418758 env[1252]: time="2025-07-14T23:32:51.418737675Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-d6spx,Uid:68f555d2-1b6e-42a2-b3e2-e56e6ab77430,Namespace:kube-system,Attempt:1,}" Jul 14 23:32:51.518285 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 23:32:51.518764 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calica8704c0f8f: link becomes ready Jul 14 23:32:51.516184 systemd-networkd[1061]: calica8704c0f8f: Link UP Jul 14 23:32:51.518580 systemd-networkd[1061]: calica8704c0f8f: Gained carrier Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.462 [INFO][3698] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--d6spx-eth0 coredns-668d6bf9bc- kube-system 68f555d2-1b6e-42a2-b3e2-e56e6ab77430 897 0 2025-07-14 23:32:11 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-d6spx eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calica8704c0f8f [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" Namespace="kube-system" Pod="coredns-668d6bf9bc-d6spx" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--d6spx-" Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.462 [INFO][3698] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" Namespace="kube-system" Pod="coredns-668d6bf9bc-d6spx" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.488 [INFO][3721] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" HandleID="k8s-pod-network.dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" Workload="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.488 [INFO][3721] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" HandleID="k8s-pod-network.dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" Workload="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd020), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-d6spx", "timestamp":"2025-07-14 23:32:51.488140565 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.488 [INFO][3721] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.488 [INFO][3721] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.488 [INFO][3721] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.492 [INFO][3721] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" host="localhost" Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.495 [INFO][3721] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.497 [INFO][3721] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.498 [INFO][3721] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.499 [INFO][3721] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.499 [INFO][3721] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" host="localhost" Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.501 [INFO][3721] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178 Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.506 [INFO][3721] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" host="localhost" Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.509 [INFO][3721] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" host="localhost" Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.509 [INFO][3721] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" host="localhost" Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.509 [INFO][3721] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:51.537714 env[1252]: 2025-07-14 23:32:51.509 [INFO][3721] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" HandleID="k8s-pod-network.dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" Workload="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:32:51.541230 env[1252]: 2025-07-14 23:32:51.513 [INFO][3698] cni-plugin/k8s.go 418: Populated endpoint ContainerID="dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" Namespace="kube-system" Pod="coredns-668d6bf9bc-d6spx" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--d6spx-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"68f555d2-1b6e-42a2-b3e2-e56e6ab77430", ResourceVersion:"897", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-d6spx", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calica8704c0f8f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:51.541230 env[1252]: 2025-07-14 23:32:51.513 [INFO][3698] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" Namespace="kube-system" Pod="coredns-668d6bf9bc-d6spx" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:32:51.541230 env[1252]: 2025-07-14 23:32:51.513 [INFO][3698] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calica8704c0f8f ContainerID="dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" Namespace="kube-system" Pod="coredns-668d6bf9bc-d6spx" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:32:51.541230 env[1252]: 2025-07-14 23:32:51.518 [INFO][3698] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" Namespace="kube-system" Pod="coredns-668d6bf9bc-d6spx" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:32:51.541230 env[1252]: 2025-07-14 23:32:51.518 [INFO][3698] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" Namespace="kube-system" Pod="coredns-668d6bf9bc-d6spx" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--d6spx-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"68f555d2-1b6e-42a2-b3e2-e56e6ab77430", ResourceVersion:"897", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178", Pod:"coredns-668d6bf9bc-d6spx", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calica8704c0f8f", MAC:"f6:8a:4c:bf:4b:29", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:51.541230 env[1252]: 2025-07-14 23:32:51.536 [INFO][3698] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178" Namespace="kube-system" Pod="coredns-668d6bf9bc-d6spx" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:32:51.548068 env[1252]: time="2025-07-14T23:32:51.548033377Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:51.548174 env[1252]: time="2025-07-14T23:32:51.548159140Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:51.548240 env[1252]: time="2025-07-14T23:32:51.548222576Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:51.548395 env[1252]: time="2025-07-14T23:32:51.548370321Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178 pid=3748 runtime=io.containerd.runc.v2 Jul 14 23:32:51.554946 systemd[1]: Started cri-containerd-dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178.scope. Jul 14 23:32:51.577691 kernel: kauditd_printk_skb: 710 callbacks suppressed Jul 14 23:32:51.577770 kernel: audit: type=1400 audit(1752535971.573:1165): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.577792 kernel: audit: type=1400 audit(1752535971.573:1166): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.581605 kernel: audit: type=1400 audit(1752535971.573:1167): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.585168 systemd-resolved[1201]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:32:51.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.589370 kernel: audit: type=1400 audit(1752535971.573:1168): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.594366 kernel: audit: type=1400 audit(1752535971.573:1169): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.600637 kernel: audit: type=1400 audit(1752535971.573:1170): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.601245 kernel: audit: type=1400 audit(1752535971.573:1171): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.604380 kernel: audit: type=1400 audit(1752535971.573:1172): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.608370 kernel: audit: type=1400 audit(1752535971.573:1173): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.576000 audit: BPF prog-id=166 op=LOAD Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3748 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466626232373035353331306336346664316233313038393062363662 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.613396 kernel: audit: type=1400 audit(1752535971.576:1174): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3748 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466626232373035353331306336346664316233313038393062363662 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit: BPF prog-id=167 op=LOAD Jul 14 23:32:51.579000 audit[3758]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024440 items=0 ppid=3748 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466626232373035353331306336346664316233313038393062363662 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit: BPF prog-id=168 op=LOAD Jul 14 23:32:51.579000 audit[3758]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000024488 items=0 ppid=3748 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466626232373035353331306336346664316233313038393062363662 Jul 14 23:32:51.579000 audit: BPF prog-id=168 op=UNLOAD Jul 14 23:32:51.579000 audit: BPF prog-id=167 op=UNLOAD Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.579000 audit: BPF prog-id=169 op=LOAD Jul 14 23:32:51.579000 audit[3758]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000024898 items=0 ppid=3748 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466626232373035353331306336346664316233313038393062363662 Jul 14 23:32:51.623596 env[1252]: time="2025-07-14T23:32:51.623564802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-d6spx,Uid:68f555d2-1b6e-42a2-b3e2-e56e6ab77430,Namespace:kube-system,Attempt:1,} returns sandbox id \"dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178\"" Jul 14 23:32:51.629240 env[1252]: time="2025-07-14T23:32:51.629217758Z" level=info msg="CreateContainer within sandbox \"dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 23:32:51.629000 audit[3783]: NETFILTER_CFG table=filter:106 family=2 entries=42 op=nft_register_chain pid=3783 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:32:51.629000 audit[3783]: SYSCALL arch=c000003e syscall=46 success=yes exit=22552 a0=3 a1=7ffc0faaa040 a2=0 a3=7ffc0faaa02c items=0 ppid=3343 pid=3783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.629000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:32:51.649430 systemd-networkd[1061]: cali32dc0dd80c9: Link UP Jul 14 23:32:51.650935 systemd-networkd[1061]: cali32dc0dd80c9: Gained carrier Jul 14 23:32:51.651514 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali32dc0dd80c9: link becomes ready Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.473 [INFO][3696] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--svtmh-eth0 coredns-668d6bf9bc- kube-system 50a79248-0bb4-4c89-913f-a33de4da7041 896 0 2025-07-14 23:32:11 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-svtmh eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali32dc0dd80c9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" Namespace="kube-system" Pod="coredns-668d6bf9bc-svtmh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--svtmh-" Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.473 [INFO][3696] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" Namespace="kube-system" Pod="coredns-668d6bf9bc-svtmh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.493 [INFO][3728] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" HandleID="k8s-pod-network.63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" Workload="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.493 [INFO][3728] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" HandleID="k8s-pod-network.63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" Workload="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd020), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-svtmh", "timestamp":"2025-07-14 23:32:51.493478783 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.493 [INFO][3728] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.509 [INFO][3728] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.509 [INFO][3728] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.601 [INFO][3728] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" host="localhost" Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.611 [INFO][3728] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.618 [INFO][3728] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.630 [INFO][3728] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.632 [INFO][3728] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.632 [INFO][3728] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" host="localhost" Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.634 [INFO][3728] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798 Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.638 [INFO][3728] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" host="localhost" Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.644 [INFO][3728] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" host="localhost" Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.644 [INFO][3728] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" host="localhost" Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.644 [INFO][3728] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:51.669887 env[1252]: 2025-07-14 23:32:51.644 [INFO][3728] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" HandleID="k8s-pod-network.63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" Workload="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:32:51.670455 env[1252]: 2025-07-14 23:32:51.646 [INFO][3696] cni-plugin/k8s.go 418: Populated endpoint ContainerID="63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" Namespace="kube-system" Pod="coredns-668d6bf9bc-svtmh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--svtmh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"50a79248-0bb4-4c89-913f-a33de4da7041", ResourceVersion:"896", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-svtmh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali32dc0dd80c9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:51.670455 env[1252]: 2025-07-14 23:32:51.646 [INFO][3696] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" Namespace="kube-system" Pod="coredns-668d6bf9bc-svtmh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:32:51.670455 env[1252]: 2025-07-14 23:32:51.646 [INFO][3696] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali32dc0dd80c9 ContainerID="63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" Namespace="kube-system" Pod="coredns-668d6bf9bc-svtmh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:32:51.670455 env[1252]: 2025-07-14 23:32:51.651 [INFO][3696] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" Namespace="kube-system" Pod="coredns-668d6bf9bc-svtmh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:32:51.670455 env[1252]: 2025-07-14 23:32:51.653 [INFO][3696] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" Namespace="kube-system" Pod="coredns-668d6bf9bc-svtmh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--svtmh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"50a79248-0bb4-4c89-913f-a33de4da7041", ResourceVersion:"896", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798", Pod:"coredns-668d6bf9bc-svtmh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali32dc0dd80c9", MAC:"1a:01:5c:9f:7e:49", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:51.670455 env[1252]: 2025-07-14 23:32:51.666 [INFO][3696] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798" Namespace="kube-system" Pod="coredns-668d6bf9bc-svtmh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:32:51.681000 audit[3791]: NETFILTER_CFG table=filter:107 family=2 entries=36 op=nft_register_chain pid=3791 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:32:51.682963 env[1252]: time="2025-07-14T23:32:51.682924493Z" level=info msg="CreateContainer within sandbox \"dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"1fd5f03d4257229eedf785c2f8b883f1af5be303ab8442796dc6a3beeadf5d9d\"" Jul 14 23:32:51.683307 env[1252]: time="2025-07-14T23:32:51.683290139Z" level=info msg="StartContainer for \"1fd5f03d4257229eedf785c2f8b883f1af5be303ab8442796dc6a3beeadf5d9d\"" Jul 14 23:32:51.681000 audit[3791]: SYSCALL arch=c000003e syscall=46 success=yes exit=19156 a0=3 a1=7fffabfebca0 a2=0 a3=7fffabfebc8c items=0 ppid=3343 pid=3791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.681000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:32:51.695248 env[1252]: time="2025-07-14T23:32:51.695201347Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:51.695248 env[1252]: time="2025-07-14T23:32:51.695227455Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:51.695248 env[1252]: time="2025-07-14T23:32:51.695234742Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:51.696854 systemd[1]: Started cri-containerd-1fd5f03d4257229eedf785c2f8b883f1af5be303ab8442796dc6a3beeadf5d9d.scope. Jul 14 23:32:51.699806 env[1252]: time="2025-07-14T23:32:51.697690373Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798 pid=3814 runtime=io.containerd.runc.v2 Jul 14 23:32:51.714616 systemd[1]: Started cri-containerd-63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798.scope. Jul 14 23:32:51.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit: BPF prog-id=170 op=LOAD Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3814 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623534366466343366623039303933333362613837393261386231 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3814 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623534366466343366623039303933333362613837393261386231 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit: BPF prog-id=171 op=LOAD Jul 14 23:32:51.723000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000dfce0 items=0 ppid=3814 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623534366466343366623039303933333362613837393261386231 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit: BPF prog-id=172 op=LOAD Jul 14 23:32:51.723000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000dfd28 items=0 ppid=3814 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623534366466343366623039303933333362613837393261386231 Jul 14 23:32:51.723000 audit: BPF prog-id=172 op=UNLOAD Jul 14 23:32:51.723000 audit: BPF prog-id=171 op=UNLOAD Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.723000 audit: BPF prog-id=173 op=LOAD Jul 14 23:32:51.723000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003e0138 items=0 ppid=3814 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623534366466343366623039303933333362613837393261386231 Jul 14 23:32:51.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.742000 audit: BPF prog-id=174 op=LOAD Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3748 pid=3801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643566303364343235373232396565646637383563326638623838 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3748 pid=3801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643566303364343235373232396565646637383563326638623838 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit: BPF prog-id=175 op=LOAD Jul 14 23:32:51.743000 audit[3801]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002035e0 items=0 ppid=3748 pid=3801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643566303364343235373232396565646637383563326638623838 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit: BPF prog-id=176 op=LOAD Jul 14 23:32:51.743000 audit[3801]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000203628 items=0 ppid=3748 pid=3801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643566303364343235373232396565646637383563326638623838 Jul 14 23:32:51.743000 audit: BPF prog-id=176 op=UNLOAD Jul 14 23:32:51.743000 audit: BPF prog-id=175 op=UNLOAD Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { perfmon } for pid=3801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit[3801]: AVC avc: denied { bpf } for pid=3801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.743000 audit: BPF prog-id=177 op=LOAD Jul 14 23:32:51.743000 audit[3801]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000203a38 items=0 ppid=3748 pid=3801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643566303364343235373232396565646637383563326638623838 Jul 14 23:32:51.726056 systemd-resolved[1201]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:32:51.749049 env[1252]: time="2025-07-14T23:32:51.748743380Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-svtmh,Uid:50a79248-0bb4-4c89-913f-a33de4da7041,Namespace:kube-system,Attempt:1,} returns sandbox id \"63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798\"" Jul 14 23:32:51.755513 env[1252]: time="2025-07-14T23:32:51.755487967Z" level=info msg="CreateContainer within sandbox \"63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 23:32:51.761869 env[1252]: time="2025-07-14T23:32:51.761838497Z" level=info msg="CreateContainer within sandbox \"63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"13e6fd0a830e9c6a2667138c92b5270a60040cbd295097d8e42718ad0171ba9c\"" Jul 14 23:32:51.762231 env[1252]: time="2025-07-14T23:32:51.762217817Z" level=info msg="StartContainer for \"13e6fd0a830e9c6a2667138c92b5270a60040cbd295097d8e42718ad0171ba9c\"" Jul 14 23:32:51.768980 env[1252]: time="2025-07-14T23:32:51.768950395Z" level=info msg="StartContainer for \"1fd5f03d4257229eedf785c2f8b883f1af5be303ab8442796dc6a3beeadf5d9d\" returns successfully" Jul 14 23:32:51.777589 systemd[1]: Started cri-containerd-13e6fd0a830e9c6a2667138c92b5270a60040cbd295097d8e42718ad0171ba9c.scope. Jul 14 23:32:51.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.787000 audit: BPF prog-id=178 op=LOAD Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3814 pid=3873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133653666643061383330653963366132363637313338633932623532 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3814 pid=3873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133653666643061383330653963366132363637313338633932623532 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit: BPF prog-id=179 op=LOAD Jul 14 23:32:51.788000 audit[3873]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002e3de0 items=0 ppid=3814 pid=3873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133653666643061383330653963366132363637313338633932623532 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit: BPF prog-id=180 op=LOAD Jul 14 23:32:51.788000 audit[3873]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002e3e28 items=0 ppid=3814 pid=3873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133653666643061383330653963366132363637313338633932623532 Jul 14 23:32:51.788000 audit: BPF prog-id=180 op=UNLOAD Jul 14 23:32:51.788000 audit: BPF prog-id=179 op=UNLOAD Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { perfmon } for pid=3873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit[3873]: AVC avc: denied { bpf } for pid=3873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:51.788000 audit: BPF prog-id=181 op=LOAD Jul 14 23:32:51.788000 audit[3873]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003a6238 items=0 ppid=3814 pid=3873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:51.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133653666643061383330653963366132363637313338633932623532 Jul 14 23:32:51.807442 systemd[1]: run-netns-cni\x2d95dd1541\x2d6358\x2def44\x2d302a\x2daabb0f3d10d1.mount: Deactivated successfully. Jul 14 23:32:51.809448 env[1252]: time="2025-07-14T23:32:51.809347730Z" level=info msg="StartContainer for \"13e6fd0a830e9c6a2667138c92b5270a60040cbd295097d8e42718ad0171ba9c\" returns successfully" Jul 14 23:32:52.083000 audit[3884]: AVC avc: denied { getattr } for pid=3884 comm="coredns" path="cgroup:[4026532623]" dev="nsfs" ino=4026532623 scontext=system_u:system_r:svirt_lxc_net_t:s0:c466,c969 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 23:32:52.083000 audit[3884]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a9a8 a2=c0004b6928 a3=0 items=0 ppid=3814 pid=3884 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c466,c969 key=(null) Jul 14 23:32:52.083000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 23:32:52.085000 audit[3829]: AVC avc: denied { getattr } for pid=3829 comm="coredns" path="cgroup:[4026532616]" dev="nsfs" ino=4026532616 scontext=system_u:system_r:svirt_lxc_net_t:s0:c436,c749 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 23:32:52.085000 audit[3829]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c0000cd148 a3=0 items=0 ppid=3748 pid=3829 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c436,c749 key=(null) Jul 14 23:32:52.085000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 23:32:52.331990 env[1252]: time="2025-07-14T23:32:52.331956074Z" level=info msg="StopPodSandbox for \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\"" Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.418 [INFO][3920] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.418 [INFO][3920] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" iface="eth0" netns="/var/run/netns/cni-1cdd68b3-646a-6268-ea46-46125ce721c5" Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.418 [INFO][3920] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" iface="eth0" netns="/var/run/netns/cni-1cdd68b3-646a-6268-ea46-46125ce721c5" Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.418 [INFO][3920] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" iface="eth0" netns="/var/run/netns/cni-1cdd68b3-646a-6268-ea46-46125ce721c5" Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.418 [INFO][3920] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.418 [INFO][3920] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.461 [INFO][3927] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" HandleID="k8s-pod-network.a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Workload="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.461 [INFO][3927] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.461 [INFO][3927] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.465 [WARNING][3927] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" HandleID="k8s-pod-network.a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Workload="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.465 [INFO][3927] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" HandleID="k8s-pod-network.a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Workload="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.466 [INFO][3927] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:52.469742 env[1252]: 2025-07-14 23:32:52.468 [INFO][3920] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:32:52.471690 systemd[1]: run-netns-cni\x2d1cdd68b3\x2d646a\x2d6268\x2dea46\x2d46125ce721c5.mount: Deactivated successfully. Jul 14 23:32:52.472778 env[1252]: time="2025-07-14T23:32:52.472752877Z" level=info msg="TearDown network for sandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\" successfully" Jul 14 23:32:52.472833 env[1252]: time="2025-07-14T23:32:52.472819885Z" level=info msg="StopPodSandbox for \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\" returns successfully" Jul 14 23:32:52.473428 env[1252]: time="2025-07-14T23:32:52.473408670Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-qchs2,Uid:64b95d63-e1e4-45ae-87ec-9b99781588aa,Namespace:calico-system,Attempt:1,}" Jul 14 23:32:52.593604 systemd-networkd[1061]: cali957370df80c: Link UP Jul 14 23:32:52.596081 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 23:32:52.596137 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali957370df80c: link becomes ready Jul 14 23:32:52.596173 systemd-networkd[1061]: cali957370df80c: Gained carrier Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.529 [INFO][3933] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--qchs2-eth0 goldmane-768f4c5c69- calico-system 64b95d63-e1e4-45ae-87ec-9b99781588aa 913 0 2025-07-14 23:32:25 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-qchs2 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali957370df80c [] [] }} ContainerID="092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" Namespace="calico-system" Pod="goldmane-768f4c5c69-qchs2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qchs2-" Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.529 [INFO][3933] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" Namespace="calico-system" Pod="goldmane-768f4c5c69-qchs2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.547 [INFO][3944] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" HandleID="k8s-pod-network.092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" Workload="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.547 [INFO][3944] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" HandleID="k8s-pod-network.092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" Workload="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5130), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-qchs2", "timestamp":"2025-07-14 23:32:52.547659781 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.548 [INFO][3944] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.548 [INFO][3944] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.548 [INFO][3944] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.557 [INFO][3944] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" host="localhost" Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.564 [INFO][3944] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.567 [INFO][3944] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.569 [INFO][3944] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.570 [INFO][3944] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.570 [INFO][3944] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" host="localhost" Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.571 [INFO][3944] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630 Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.575 [INFO][3944] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" host="localhost" Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.588 [INFO][3944] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" host="localhost" Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.588 [INFO][3944] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" host="localhost" Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.588 [INFO][3944] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:52.618159 env[1252]: 2025-07-14 23:32:52.588 [INFO][3944] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" HandleID="k8s-pod-network.092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" Workload="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:32:52.621740 env[1252]: 2025-07-14 23:32:52.591 [INFO][3933] cni-plugin/k8s.go 418: Populated endpoint ContainerID="092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" Namespace="calico-system" Pod="goldmane-768f4c5c69-qchs2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--qchs2-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"64b95d63-e1e4-45ae-87ec-9b99781588aa", ResourceVersion:"913", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-qchs2", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali957370df80c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:52.621740 env[1252]: 2025-07-14 23:32:52.591 [INFO][3933] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" Namespace="calico-system" Pod="goldmane-768f4c5c69-qchs2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:32:52.621740 env[1252]: 2025-07-14 23:32:52.591 [INFO][3933] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali957370df80c ContainerID="092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" Namespace="calico-system" Pod="goldmane-768f4c5c69-qchs2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:32:52.621740 env[1252]: 2025-07-14 23:32:52.594 [INFO][3933] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" Namespace="calico-system" Pod="goldmane-768f4c5c69-qchs2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:32:52.621740 env[1252]: 2025-07-14 23:32:52.596 [INFO][3933] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" Namespace="calico-system" Pod="goldmane-768f4c5c69-qchs2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--qchs2-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"64b95d63-e1e4-45ae-87ec-9b99781588aa", ResourceVersion:"913", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630", Pod:"goldmane-768f4c5c69-qchs2", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali957370df80c", MAC:"a2:de:be:3f:2e:cf", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:52.621740 env[1252]: 2025-07-14 23:32:52.616 [INFO][3933] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630" Namespace="calico-system" Pod="goldmane-768f4c5c69-qchs2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:32:52.637000 audit[3961]: NETFILTER_CFG table=filter:108 family=2 entries=52 op=nft_register_chain pid=3961 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:32:52.637000 audit[3961]: SYSCALL arch=c000003e syscall=46 success=yes exit=27556 a0=3 a1=7ffc8905cb90 a2=0 a3=7ffc8905cb7c items=0 ppid=3343 pid=3961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:52.637000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:32:52.641245 env[1252]: time="2025-07-14T23:32:52.641205582Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:52.641373 env[1252]: time="2025-07-14T23:32:52.641235445Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:52.641373 env[1252]: time="2025-07-14T23:32:52.641242906Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:52.641504 env[1252]: time="2025-07-14T23:32:52.641447248Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630 pid=3970 runtime=io.containerd.runc.v2 Jul 14 23:32:52.654862 systemd[1]: Started cri-containerd-092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630.scope. Jul 14 23:32:52.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit: BPF prog-id=182 op=LOAD Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3970 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:52.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039323237356633373134626261633063633336396563623637386266 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3970 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:52.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039323237356633373134626261633063633336396563623637386266 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit: BPF prog-id=183 op=LOAD Jul 14 23:32:52.666000 audit[3981]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000389040 items=0 ppid=3970 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:52.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039323237356633373134626261633063633336396563623637386266 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.666000 audit: BPF prog-id=184 op=LOAD Jul 14 23:32:52.666000 audit[3981]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000389088 items=0 ppid=3970 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:52.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039323237356633373134626261633063633336396563623637386266 Jul 14 23:32:52.666000 audit: BPF prog-id=184 op=UNLOAD Jul 14 23:32:52.667000 audit: BPF prog-id=183 op=UNLOAD Jul 14 23:32:52.667000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.667000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.667000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.667000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.667000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.667000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.667000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.667000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.667000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.667000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:52.667000 audit: BPF prog-id=185 op=LOAD Jul 14 23:32:52.667000 audit[3981]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000389498 items=0 ppid=3970 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:52.667000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039323237356633373134626261633063633336396563623637386266 Jul 14 23:32:52.670388 systemd-resolved[1201]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:32:52.710028 env[1252]: time="2025-07-14T23:32:52.710001155Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-qchs2,Uid:64b95d63-e1e4-45ae-87ec-9b99781588aa,Namespace:calico-system,Attempt:1,} returns sandbox id \"092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630\"" Jul 14 23:32:52.751454 systemd-networkd[1061]: calica8704c0f8f: Gained IPv6LL Jul 14 23:32:53.391749 systemd-networkd[1061]: cali32dc0dd80c9: Gained IPv6LL Jul 14 23:32:53.724892 env[1252]: time="2025-07-14T23:32:53.724660698Z" level=info msg="StopPodSandbox for \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\"" Jul 14 23:32:53.743291 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3821003289.mount: Deactivated successfully. Jul 14 23:32:53.774548 env[1252]: time="2025-07-14T23:32:53.774456311Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:53.779941 env[1252]: time="2025-07-14T23:32:53.779911588Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:53.783429 env[1252]: time="2025-07-14T23:32:53.783405383Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:53.784413 env[1252]: time="2025-07-14T23:32:53.784397934Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:53.784715 env[1252]: time="2025-07-14T23:32:53.784699460Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 14 23:32:53.795604 env[1252]: time="2025-07-14T23:32:53.795571381Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 14 23:32:53.806919 env[1252]: time="2025-07-14T23:32:53.806339126Z" level=info msg="CreateContainer within sandbox \"5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 14 23:32:53.830053 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3227235451.mount: Deactivated successfully. Jul 14 23:32:53.879111 env[1252]: time="2025-07-14T23:32:53.879069743Z" level=info msg="CreateContainer within sandbox \"5ba4d499f43a3d1045096f8e57d1c32e424b0762e2fd9d5082131c6126e52eba\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"f23867ed1a7e5d2f02c8251d9a28a05170f42fa77f024166e642a291a56cea3f\"" Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:53.880 [INFO][4013] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:53.884 [INFO][4013] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" iface="eth0" netns="/var/run/netns/cni-8c0c904d-c823-53fe-04cc-f9cc43352aad" Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:53.884 [INFO][4013] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" iface="eth0" netns="/var/run/netns/cni-8c0c904d-c823-53fe-04cc-f9cc43352aad" Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:53.884 [INFO][4013] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" iface="eth0" netns="/var/run/netns/cni-8c0c904d-c823-53fe-04cc-f9cc43352aad" Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:53.884 [INFO][4013] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:53.884 [INFO][4013] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:54.004 [INFO][4020] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" HandleID="k8s-pod-network.f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" Workload="localhost-k8s-csi--node--driver--dgp89-eth0" Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:54.026 [INFO][4020] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:54.026 [INFO][4020] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:54.113 [WARNING][4020] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" HandleID="k8s-pod-network.f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" Workload="localhost-k8s-csi--node--driver--dgp89-eth0" Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:54.113 [INFO][4020] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" HandleID="k8s-pod-network.f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" Workload="localhost-k8s-csi--node--driver--dgp89-eth0" Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:54.193 [INFO][4020] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:54.196533 env[1252]: 2025-07-14 23:32:54.195 [INFO][4013] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9" Jul 14 23:32:54.198622 systemd[1]: run-netns-cni\x2d8c0c904d\x2dc823\x2d53fe\x2d04cc\x2df9cc43352aad.mount: Deactivated successfully. Jul 14 23:32:54.205091 env[1252]: time="2025-07-14T23:32:54.199274800Z" level=info msg="TearDown network for sandbox \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\" successfully" Jul 14 23:32:54.205091 env[1252]: time="2025-07-14T23:32:54.199298994Z" level=info msg="StopPodSandbox for \"f965d056ead049be18ead58f9c8f16c3d3f8786abe25dc9928bcc83ebc6960a9\" returns successfully" Jul 14 23:32:54.309205 kubelet[2107]: I0714 23:32:54.143815 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-svtmh" podStartSLOduration=42.813764315 podStartE2EDuration="42.813764315s" podCreationTimestamp="2025-07-14 23:32:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:32:53.813628167 +0000 UTC m=+45.695558956" watchObservedRunningTime="2025-07-14 23:32:53.813764315 +0000 UTC m=+45.695695103" Jul 14 23:32:54.607495 systemd-networkd[1061]: cali957370df80c: Gained IPv6LL Jul 14 23:32:54.681778 kubelet[2107]: I0714 23:32:54.681735 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-d6spx" podStartSLOduration=43.68172065 podStartE2EDuration="43.68172065s" podCreationTimestamp="2025-07-14 23:32:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:32:53.801787487 +0000 UTC m=+45.683718283" watchObservedRunningTime="2025-07-14 23:32:54.68172065 +0000 UTC m=+46.563651440" Jul 14 23:32:54.739226 env[1252]: time="2025-07-14T23:32:54.738996600Z" level=info msg="StopPodSandbox for \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\"" Jul 14 23:32:54.739226 env[1252]: time="2025-07-14T23:32:54.739038970Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-dgp89,Uid:e774804a-35d8-44da-8f27-608495f04638,Namespace:calico-system,Attempt:1,}" Jul 14 23:32:54.740476 env[1252]: time="2025-07-14T23:32:54.739551619Z" level=info msg="StopPodSandbox for \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\"" Jul 14 23:32:54.740476 env[1252]: time="2025-07-14T23:32:54.739836265Z" level=info msg="StopPodSandbox for \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\"" Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.789 [INFO][4058] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.789 [INFO][4058] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" iface="eth0" netns="/var/run/netns/cni-458ee668-8578-2160-0faf-35fac6db8247" Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.789 [INFO][4058] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" iface="eth0" netns="/var/run/netns/cni-458ee668-8578-2160-0faf-35fac6db8247" Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.789 [INFO][4058] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" iface="eth0" netns="/var/run/netns/cni-458ee668-8578-2160-0faf-35fac6db8247" Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.789 [INFO][4058] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.789 [INFO][4058] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.857 [INFO][4079] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" HandleID="k8s-pod-network.e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Workload="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.857 [INFO][4079] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.857 [INFO][4079] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.863 [WARNING][4079] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" HandleID="k8s-pod-network.e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Workload="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.863 [INFO][4079] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" HandleID="k8s-pod-network.e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Workload="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.873 [INFO][4079] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:54.878750 env[1252]: 2025-07-14 23:32:54.875 [INFO][4058] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:32:54.896406 env[1252]: time="2025-07-14T23:32:54.881507672Z" level=info msg="TearDown network for sandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\" successfully" Jul 14 23:32:54.896406 env[1252]: time="2025-07-14T23:32:54.881535370Z" level=info msg="StopPodSandbox for \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\" returns successfully" Jul 14 23:32:54.880592 systemd[1]: run-netns-cni\x2d458ee668\x2d8578\x2d2160\x2d0faf\x2d35fac6db8247.mount: Deactivated successfully. Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.811 [INFO][4059] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.811 [INFO][4059] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" iface="eth0" netns="/var/run/netns/cni-1c507724-ea8d-4f1b-387f-17f2bc5cd4be" Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.811 [INFO][4059] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" iface="eth0" netns="/var/run/netns/cni-1c507724-ea8d-4f1b-387f-17f2bc5cd4be" Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.811 [INFO][4059] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" iface="eth0" netns="/var/run/netns/cni-1c507724-ea8d-4f1b-387f-17f2bc5cd4be" Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.811 [INFO][4059] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.811 [INFO][4059] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.866 [INFO][4085] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" HandleID="k8s-pod-network.56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" Workload="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.867 [INFO][4085] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.874 [INFO][4085] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.898 [WARNING][4085] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" HandleID="k8s-pod-network.56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" Workload="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.899 [INFO][4085] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" HandleID="k8s-pod-network.56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" Workload="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.901 [INFO][4085] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:54.907213 env[1252]: 2025-07-14 23:32:54.903 [INFO][4059] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1" Jul 14 23:32:54.914452 env[1252]: time="2025-07-14T23:32:54.912077752Z" level=info msg="TearDown network for sandbox \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\" successfully" Jul 14 23:32:54.914452 env[1252]: time="2025-07-14T23:32:54.912152787Z" level=info msg="StopPodSandbox for \"56dc5c11c738908c9e27e8fecaf1cf890febfa499743e2c77662e0d90e2f4ed1\" returns successfully" Jul 14 23:32:54.909139 systemd[1]: run-netns-cni\x2d1c507724\x2dea8d\x2d4f1b\x2d387f\x2d17f2bc5cd4be.mount: Deactivated successfully. Jul 14 23:32:54.932111 env[1252]: time="2025-07-14T23:32:54.932037681Z" level=info msg="StartContainer for \"f23867ed1a7e5d2f02c8251d9a28a05170f42fa77f024166e642a291a56cea3f\"" Jul 14 23:32:54.932624 env[1252]: time="2025-07-14T23:32:54.932604081Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7f7ff94-ttkwk,Uid:58fd77fd-b503-43f8-b3cb-8485972f220f,Namespace:calico-apiserver,Attempt:1,}" Jul 14 23:32:54.933111 env[1252]: time="2025-07-14T23:32:54.932047071Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7f7ff94-nzt6j,Uid:aeb17c86-3da8-414a-a622-bb7dd1653fb3,Namespace:calico-apiserver,Attempt:1,}" Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.873 [INFO][4072] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.874 [INFO][4072] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" iface="eth0" netns="/var/run/netns/cni-2ed1113b-4946-808a-503c-05c01ac97d0c" Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.874 [INFO][4072] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" iface="eth0" netns="/var/run/netns/cni-2ed1113b-4946-808a-503c-05c01ac97d0c" Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.874 [INFO][4072] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" iface="eth0" netns="/var/run/netns/cni-2ed1113b-4946-808a-503c-05c01ac97d0c" Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.874 [INFO][4072] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.874 [INFO][4072] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.935 [INFO][4096] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" HandleID="k8s-pod-network.8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" Workload="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.936 [INFO][4096] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.936 [INFO][4096] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.940 [WARNING][4096] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" HandleID="k8s-pod-network.8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" Workload="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.940 [INFO][4096] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" HandleID="k8s-pod-network.8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" Workload="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.941 [INFO][4096] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:54.943959 env[1252]: 2025-07-14 23:32:54.942 [INFO][4072] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522" Jul 14 23:32:54.947037 env[1252]: time="2025-07-14T23:32:54.946725851Z" level=info msg="TearDown network for sandbox \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\" successfully" Jul 14 23:32:54.947037 env[1252]: time="2025-07-14T23:32:54.946752144Z" level=info msg="StopPodSandbox for \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\" returns successfully" Jul 14 23:32:54.945706 systemd[1]: run-netns-cni\x2d2ed1113b\x2d4946\x2d808a\x2d503c\x2d05c01ac97d0c.mount: Deactivated successfully. Jul 14 23:32:55.054597 env[1252]: time="2025-07-14T23:32:55.053832299Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-dbdbfd467-d6jdf,Uid:1258f5c1-e9aa-4693-bb82-d25ad59c0a09,Namespace:calico-system,Attempt:1,}" Jul 14 23:32:55.054462 systemd[1]: Started cri-containerd-f23867ed1a7e5d2f02c8251d9a28a05170f42fa77f024166e642a291a56cea3f.scope. Jul 14 23:32:55.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit: BPF prog-id=186 op=LOAD Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3567 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632333836376564316137653564326630326338323531643961323861 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3567 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632333836376564316137653564326630326338323531643961323861 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit: BPF prog-id=187 op=LOAD Jul 14 23:32:55.078000 audit[4125]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002a2d60 items=0 ppid=3567 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632333836376564316137653564326630326338323531643961323861 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit: BPF prog-id=188 op=LOAD Jul 14 23:32:55.078000 audit[4125]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002a2da8 items=0 ppid=3567 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632333836376564316137653564326630326338323531643961323861 Jul 14 23:32:55.078000 audit: BPF prog-id=188 op=UNLOAD Jul 14 23:32:55.078000 audit: BPF prog-id=187 op=UNLOAD Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.078000 audit: BPF prog-id=189 op=LOAD Jul 14 23:32:55.078000 audit[4125]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002a31b8 items=0 ppid=3567 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632333836376564316137653564326630326338323531643961323861 Jul 14 23:32:55.116000 audit[4179]: NETFILTER_CFG table=filter:109 family=2 entries=17 op=nft_register_rule pid=4179 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:55.116000 audit[4179]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffff13d1c30 a2=0 a3=7ffff13d1c1c items=0 ppid=2203 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.116000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:55.136732 env[1252]: time="2025-07-14T23:32:55.128992947Z" level=info msg="StartContainer for \"f23867ed1a7e5d2f02c8251d9a28a05170f42fa77f024166e642a291a56cea3f\" returns successfully" Jul 14 23:32:55.180774 systemd-networkd[1061]: cali8e9dfb13360: Link UP Jul 14 23:32:55.185551 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 23:32:55.185727 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8e9dfb13360: link becomes ready Jul 14 23:32:55.186343 systemd-networkd[1061]: cali8e9dfb13360: Gained carrier Jul 14 23:32:55.200000 audit[4179]: NETFILTER_CFG table=nat:110 family=2 entries=47 op=nft_register_chain pid=4179 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:55.200000 audit[4179]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffff13d1c30 a2=0 a3=7ffff13d1c1c items=0 ppid=2203 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.200000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:54.967 [INFO][4103] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--dgp89-eth0 csi-node-driver- calico-system e774804a-35d8-44da-8f27-608495f04638 924 0 2025-07-14 23:32:26 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-dgp89 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali8e9dfb13360 [] [] }} ContainerID="1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" Namespace="calico-system" Pod="csi-node-driver-dgp89" WorkloadEndpoint="localhost-k8s-csi--node--driver--dgp89-" Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:54.967 [INFO][4103] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" Namespace="calico-system" Pod="csi-node-driver-dgp89" WorkloadEndpoint="localhost-k8s-csi--node--driver--dgp89-eth0" Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.039 [INFO][4128] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" HandleID="k8s-pod-network.1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" Workload="localhost-k8s-csi--node--driver--dgp89-eth0" Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.039 [INFO][4128] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" HandleID="k8s-pod-network.1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" Workload="localhost-k8s-csi--node--driver--dgp89-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ccf50), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-dgp89", "timestamp":"2025-07-14 23:32:55.039782444 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.040 [INFO][4128] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.040 [INFO][4128] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.040 [INFO][4128] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.129 [INFO][4128] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" host="localhost" Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.141 [INFO][4128] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.145 [INFO][4128] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.146 [INFO][4128] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.149 [INFO][4128] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.150 [INFO][4128] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" host="localhost" Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.151 [INFO][4128] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66 Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.161 [INFO][4128] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" host="localhost" Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.168 [INFO][4128] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" host="localhost" Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.168 [INFO][4128] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" host="localhost" Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.168 [INFO][4128] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:55.206593 env[1252]: 2025-07-14 23:32:55.168 [INFO][4128] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" HandleID="k8s-pod-network.1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" Workload="localhost-k8s-csi--node--driver--dgp89-eth0" Jul 14 23:32:55.207848 env[1252]: 2025-07-14 23:32:55.172 [INFO][4103] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" Namespace="calico-system" Pod="csi-node-driver-dgp89" WorkloadEndpoint="localhost-k8s-csi--node--driver--dgp89-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--dgp89-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"e774804a-35d8-44da-8f27-608495f04638", ResourceVersion:"924", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-dgp89", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8e9dfb13360", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:55.207848 env[1252]: 2025-07-14 23:32:55.172 [INFO][4103] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" Namespace="calico-system" Pod="csi-node-driver-dgp89" WorkloadEndpoint="localhost-k8s-csi--node--driver--dgp89-eth0" Jul 14 23:32:55.207848 env[1252]: 2025-07-14 23:32:55.172 [INFO][4103] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8e9dfb13360 ContainerID="1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" Namespace="calico-system" Pod="csi-node-driver-dgp89" WorkloadEndpoint="localhost-k8s-csi--node--driver--dgp89-eth0" Jul 14 23:32:55.207848 env[1252]: 2025-07-14 23:32:55.187 [INFO][4103] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" Namespace="calico-system" Pod="csi-node-driver-dgp89" WorkloadEndpoint="localhost-k8s-csi--node--driver--dgp89-eth0" Jul 14 23:32:55.207848 env[1252]: 2025-07-14 23:32:55.187 [INFO][4103] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" Namespace="calico-system" Pod="csi-node-driver-dgp89" WorkloadEndpoint="localhost-k8s-csi--node--driver--dgp89-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--dgp89-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"e774804a-35d8-44da-8f27-608495f04638", ResourceVersion:"924", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66", Pod:"csi-node-driver-dgp89", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8e9dfb13360", MAC:"52:01:9e:21:ee:d7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:55.207848 env[1252]: 2025-07-14 23:32:55.199 [INFO][4103] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66" Namespace="calico-system" Pod="csi-node-driver-dgp89" WorkloadEndpoint="localhost-k8s-csi--node--driver--dgp89-eth0" Jul 14 23:32:55.223193 env[1252]: time="2025-07-14T23:32:55.223145878Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:55.223515 env[1252]: time="2025-07-14T23:32:55.223340697Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:55.223600 env[1252]: time="2025-07-14T23:32:55.223583875Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:55.223750 env[1252]: time="2025-07-14T23:32:55.223730816Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66 pid=4222 runtime=io.containerd.runc.v2 Jul 14 23:32:55.243739 systemd[1]: Started cri-containerd-1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66.scope. Jul 14 23:32:55.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.270000 audit: BPF prog-id=190 op=LOAD Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4222 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393464633736363037373166343230343432633033376633316166 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4222 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393464633736363037373166343230343432633033376633316166 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit: BPF prog-id=191 op=LOAD Jul 14 23:32:55.271000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00032d120 items=0 ppid=4222 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393464633736363037373166343230343432633033376633316166 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit: BPF prog-id=192 op=LOAD Jul 14 23:32:55.271000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00032d168 items=0 ppid=4222 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393464633736363037373166343230343432633033376633316166 Jul 14 23:32:55.271000 audit: BPF prog-id=192 op=UNLOAD Jul 14 23:32:55.271000 audit: BPF prog-id=191 op=UNLOAD Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.271000 audit: BPF prog-id=193 op=LOAD Jul 14 23:32:55.271000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00032d578 items=0 ppid=4222 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393464633736363037373166343230343432633033376633316166 Jul 14 23:32:55.274000 audit[4258]: NETFILTER_CFG table=filter:111 family=2 entries=14 op=nft_register_rule pid=4258 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:55.274000 audit[4258]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc33263400 a2=0 a3=7ffc332633ec items=0 ppid=2203 pid=4258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.274000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:55.279000 audit[4258]: NETFILTER_CFG table=nat:112 family=2 entries=20 op=nft_register_rule pid=4258 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:55.279000 audit[4258]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc33263400 a2=0 a3=7ffc332633ec items=0 ppid=2203 pid=4258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.279000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:55.286000 audit[4261]: NETFILTER_CFG table=filter:113 family=2 entries=48 op=nft_register_chain pid=4261 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:32:55.286000 audit[4261]: SYSCALL arch=c000003e syscall=46 success=yes exit=23140 a0=3 a1=7fff31d475b0 a2=0 a3=7fff31d4759c items=0 ppid=3343 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.286000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:32:55.275388 systemd-resolved[1201]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:32:55.335575 env[1252]: time="2025-07-14T23:32:55.287580725Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-dgp89,Uid:e774804a-35d8-44da-8f27-608495f04638,Namespace:calico-system,Attempt:1,} returns sandbox id \"1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66\"" Jul 14 23:32:55.367047 systemd-networkd[1061]: cali63b4c44e150: Link UP Jul 14 23:32:55.369366 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali63b4c44e150: link becomes ready Jul 14 23:32:55.374453 systemd-networkd[1061]: cali63b4c44e150: Gained carrier Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.081 [INFO][4142] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0 calico-apiserver-7f7ff94- calico-apiserver aeb17c86-3da8-414a-a622-bb7dd1653fb3 941 0 2025-07-14 23:32:24 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7f7ff94 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7f7ff94-nzt6j eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali63b4c44e150 [] [] }} ContainerID="290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-nzt6j" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-" Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.081 [INFO][4142] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-nzt6j" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.139 [INFO][4175] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" HandleID="k8s-pod-network.290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" Workload="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.140 [INFO][4175] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" HandleID="k8s-pod-network.290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" Workload="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ad4a0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7f7ff94-nzt6j", "timestamp":"2025-07-14 23:32:55.139802345 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.140 [INFO][4175] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.168 [INFO][4175] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.168 [INFO][4175] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.211 [INFO][4175] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" host="localhost" Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.236 [INFO][4175] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.268 [INFO][4175] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.272 [INFO][4175] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.274 [INFO][4175] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.275 [INFO][4175] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" host="localhost" Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.283 [INFO][4175] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423 Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.296 [INFO][4175] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" host="localhost" Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.351 [INFO][4175] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" host="localhost" Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.351 [INFO][4175] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" host="localhost" Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.351 [INFO][4175] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:55.407860 env[1252]: 2025-07-14 23:32:55.351 [INFO][4175] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" HandleID="k8s-pod-network.290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" Workload="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:32:55.411160 env[1252]: 2025-07-14 23:32:55.355 [INFO][4142] cni-plugin/k8s.go 418: Populated endpoint ContainerID="290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-nzt6j" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0", GenerateName:"calico-apiserver-7f7ff94-", Namespace:"calico-apiserver", SelfLink:"", UID:"aeb17c86-3da8-414a-a622-bb7dd1653fb3", ResourceVersion:"941", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7f7ff94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7f7ff94-nzt6j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali63b4c44e150", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:55.411160 env[1252]: 2025-07-14 23:32:55.355 [INFO][4142] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-nzt6j" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:32:55.411160 env[1252]: 2025-07-14 23:32:55.355 [INFO][4142] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali63b4c44e150 ContainerID="290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-nzt6j" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:32:55.411160 env[1252]: 2025-07-14 23:32:55.369 [INFO][4142] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-nzt6j" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:32:55.411160 env[1252]: 2025-07-14 23:32:55.377 [INFO][4142] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-nzt6j" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0", GenerateName:"calico-apiserver-7f7ff94-", Namespace:"calico-apiserver", SelfLink:"", UID:"aeb17c86-3da8-414a-a622-bb7dd1653fb3", ResourceVersion:"941", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7f7ff94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423", Pod:"calico-apiserver-7f7ff94-nzt6j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali63b4c44e150", MAC:"1a:34:de:39:99:88", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:55.411160 env[1252]: 2025-07-14 23:32:55.405 [INFO][4142] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-nzt6j" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:32:55.444945 env[1252]: time="2025-07-14T23:32:55.444583379Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:55.444945 env[1252]: time="2025-07-14T23:32:55.444635726Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:55.444945 env[1252]: time="2025-07-14T23:32:55.444654310Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:55.444945 env[1252]: time="2025-07-14T23:32:55.444755922Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423 pid=4285 runtime=io.containerd.runc.v2 Jul 14 23:32:55.477310 systemd-networkd[1061]: calidd55fac2ac0: Link UP Jul 14 23:32:55.483579 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidd55fac2ac0: link becomes ready Jul 14 23:32:55.483863 systemd-networkd[1061]: calidd55fac2ac0: Gained carrier Jul 14 23:32:55.487146 systemd[1]: Started cri-containerd-290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423.scope. Jul 14 23:32:55.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.518000 audit: BPF prog-id=194 op=LOAD Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4285 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.519000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239306164373166613538336661393339393837393538326631323233 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4285 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.519000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239306164373166613538336661393339393837393538326631323233 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit: BPF prog-id=195 op=LOAD Jul 14 23:32:55.519000 audit[4294]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003ec530 items=0 ppid=4285 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.519000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239306164373166613538336661393339393837393538326631323233 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit: BPF prog-id=196 op=LOAD Jul 14 23:32:55.519000 audit[4294]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003ec578 items=0 ppid=4285 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.519000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239306164373166613538336661393339393837393538326631323233 Jul 14 23:32:55.519000 audit: BPF prog-id=196 op=UNLOAD Jul 14 23:32:55.519000 audit: BPF prog-id=195 op=UNLOAD Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.519000 audit: BPF prog-id=197 op=LOAD Jul 14 23:32:55.519000 audit[4294]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003ec988 items=0 ppid=4285 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.519000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239306164373166613538336661393339393837393538326631323233 Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.074 [INFO][4126] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0 calico-apiserver-7f7ff94- calico-apiserver 58fd77fd-b503-43f8-b3cb-8485972f220f 942 0 2025-07-14 23:32:24 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7f7ff94 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7f7ff94-ttkwk eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calidd55fac2ac0 [] [] }} ContainerID="4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-ttkwk" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-" Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.074 [INFO][4126] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-ttkwk" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.159 [INFO][4181] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" HandleID="k8s-pod-network.4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" Workload="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.159 [INFO][4181] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" HandleID="k8s-pod-network.4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" Workload="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c9110), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7f7ff94-ttkwk", "timestamp":"2025-07-14 23:32:55.159136777 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.159 [INFO][4181] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.351 [INFO][4181] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.351 [INFO][4181] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.395 [INFO][4181] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" host="localhost" Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.402 [INFO][4181] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.416 [INFO][4181] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.427 [INFO][4181] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.434 [INFO][4181] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.434 [INFO][4181] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" host="localhost" Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.437 [INFO][4181] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.451 [INFO][4181] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" host="localhost" Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.469 [INFO][4181] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" host="localhost" Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.469 [INFO][4181] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" host="localhost" Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.469 [INFO][4181] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:55.535570 env[1252]: 2025-07-14 23:32:55.469 [INFO][4181] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" HandleID="k8s-pod-network.4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" Workload="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" Jul 14 23:32:55.524366 systemd-resolved[1201]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:32:55.552004 env[1252]: 2025-07-14 23:32:55.474 [INFO][4126] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-ttkwk" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0", GenerateName:"calico-apiserver-7f7ff94-", Namespace:"calico-apiserver", SelfLink:"", UID:"58fd77fd-b503-43f8-b3cb-8485972f220f", ResourceVersion:"942", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7f7ff94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7f7ff94-ttkwk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidd55fac2ac0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:55.552004 env[1252]: 2025-07-14 23:32:55.474 [INFO][4126] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-ttkwk" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" Jul 14 23:32:55.552004 env[1252]: 2025-07-14 23:32:55.474 [INFO][4126] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidd55fac2ac0 ContainerID="4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-ttkwk" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" Jul 14 23:32:55.552004 env[1252]: 2025-07-14 23:32:55.484 [INFO][4126] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-ttkwk" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" Jul 14 23:32:55.552004 env[1252]: 2025-07-14 23:32:55.484 [INFO][4126] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-ttkwk" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0", GenerateName:"calico-apiserver-7f7ff94-", Namespace:"calico-apiserver", SelfLink:"", UID:"58fd77fd-b503-43f8-b3cb-8485972f220f", ResourceVersion:"942", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7f7ff94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a", Pod:"calico-apiserver-7f7ff94-ttkwk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidd55fac2ac0", MAC:"a2:10:d4:a0:71:f6", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:55.552004 env[1252]: 2025-07-14 23:32:55.517 [INFO][4126] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a" Namespace="calico-apiserver" Pod="calico-apiserver-7f7ff94-ttkwk" WorkloadEndpoint="localhost-k8s-calico--apiserver--7f7ff94--ttkwk-eth0" Jul 14 23:32:55.567627 env[1252]: time="2025-07-14T23:32:55.567598808Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7f7ff94-nzt6j,Uid:aeb17c86-3da8-414a-a622-bb7dd1653fb3,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423\"" Jul 14 23:32:55.568559 env[1252]: time="2025-07-14T23:32:55.568509232Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:55.568637 env[1252]: time="2025-07-14T23:32:55.568563100Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:55.568637 env[1252]: time="2025-07-14T23:32:55.568594286Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:55.571000 audit[4342]: NETFILTER_CFG table=filter:114 family=2 entries=66 op=nft_register_chain pid=4342 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:32:55.571000 audit[4342]: SYSCALL arch=c000003e syscall=46 success=yes exit=32960 a0=3 a1=7ffdcfd6aa70 a2=0 a3=7ffdcfd6aa5c items=0 ppid=3343 pid=4342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.571000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:32:55.582473 env[1252]: time="2025-07-14T23:32:55.569018325Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a pid=4336 runtime=io.containerd.runc.v2 Jul 14 23:32:55.581095 systemd[1]: Started cri-containerd-4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a.scope. Jul 14 23:32:55.589399 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6e3466c7419: link becomes ready Jul 14 23:32:55.587497 systemd-networkd[1061]: cali6e3466c7419: Link UP Jul 14 23:32:55.590256 systemd-networkd[1061]: cali6e3466c7419: Gained carrier Jul 14 23:32:55.595000 audit[4361]: NETFILTER_CFG table=filter:115 family=2 entries=57 op=nft_register_chain pid=4361 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:32:55.595000 audit[4361]: SYSCALL arch=c000003e syscall=46 success=yes exit=27828 a0=3 a1=7ffcc80521e0 a2=0 a3=7ffcc80521cc items=0 ppid=3343 pid=4361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.595000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:32:55.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit: BPF prog-id=198 op=LOAD Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4336 pid=4346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323266643762666434646330626230653834306537343434373935 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4336 pid=4346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323266643762666434646330626230653834306537343434373935 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit: BPF prog-id=199 op=LOAD Jul 14 23:32:55.603000 audit[4346]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000227040 items=0 ppid=4336 pid=4346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323266643762666434646330626230653834306537343434373935 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit: BPF prog-id=200 op=LOAD Jul 14 23:32:55.603000 audit[4346]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000227088 items=0 ppid=4336 pid=4346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323266643762666434646330626230653834306537343434373935 Jul 14 23:32:55.603000 audit: BPF prog-id=200 op=UNLOAD Jul 14 23:32:55.603000 audit: BPF prog-id=199 op=UNLOAD Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { perfmon } for pid=4346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit[4346]: AVC avc: denied { bpf } for pid=4346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.603000 audit: BPF prog-id=201 op=LOAD Jul 14 23:32:55.603000 audit[4346]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000227498 items=0 ppid=4336 pid=4346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323266643762666434646330626230653834306537343434373935 Jul 14 23:32:55.626000 audit[4375]: NETFILTER_CFG table=filter:116 family=2 entries=66 op=nft_register_chain pid=4375 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:32:55.626000 audit[4375]: SYSCALL arch=c000003e syscall=46 success=yes exit=29556 a0=3 a1=7fff78b5b440 a2=0 a3=7fff78b5b42c items=0 ppid=3343 pid=4375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.626000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:32:55.604912 systemd-resolved[1201]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.297 [INFO][4197] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0 calico-kube-controllers-dbdbfd467- calico-system 1258f5c1-e9aa-4693-bb82-d25ad59c0a09 943 0 2025-07-14 23:32:27 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:dbdbfd467 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-dbdbfd467-d6jdf eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali6e3466c7419 [] [] }} ContainerID="9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" Namespace="calico-system" Pod="calico-kube-controllers-dbdbfd467-d6jdf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-" Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.297 [INFO][4197] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" Namespace="calico-system" Pod="calico-kube-controllers-dbdbfd467-d6jdf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.461 [INFO][4270] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" HandleID="k8s-pod-network.9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" Workload="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.462 [INFO][4270] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" HandleID="k8s-pod-network.9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" Workload="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-dbdbfd467-d6jdf", "timestamp":"2025-07-14 23:32:55.461753922 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.485 [INFO][4270] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.485 [INFO][4270] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.485 [INFO][4270] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.517 [INFO][4270] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" host="localhost" Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.523 [INFO][4270] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.527 [INFO][4270] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.529 [INFO][4270] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.531 [INFO][4270] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.531 [INFO][4270] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" host="localhost" Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.543 [INFO][4270] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.560 [INFO][4270] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" host="localhost" Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.574 [INFO][4270] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" host="localhost" Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.574 [INFO][4270] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" host="localhost" Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.574 [INFO][4270] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:32:55.631994 env[1252]: 2025-07-14 23:32:55.574 [INFO][4270] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" HandleID="k8s-pod-network.9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" Workload="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" Jul 14 23:32:55.636677 env[1252]: 2025-07-14 23:32:55.578 [INFO][4197] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" Namespace="calico-system" Pod="calico-kube-controllers-dbdbfd467-d6jdf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0", GenerateName:"calico-kube-controllers-dbdbfd467-", Namespace:"calico-system", SelfLink:"", UID:"1258f5c1-e9aa-4693-bb82-d25ad59c0a09", ResourceVersion:"943", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"dbdbfd467", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-dbdbfd467-d6jdf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali6e3466c7419", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:55.636677 env[1252]: 2025-07-14 23:32:55.578 [INFO][4197] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" Namespace="calico-system" Pod="calico-kube-controllers-dbdbfd467-d6jdf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" Jul 14 23:32:55.636677 env[1252]: 2025-07-14 23:32:55.578 [INFO][4197] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6e3466c7419 ContainerID="9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" Namespace="calico-system" Pod="calico-kube-controllers-dbdbfd467-d6jdf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" Jul 14 23:32:55.636677 env[1252]: 2025-07-14 23:32:55.591 [INFO][4197] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" Namespace="calico-system" Pod="calico-kube-controllers-dbdbfd467-d6jdf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" Jul 14 23:32:55.636677 env[1252]: 2025-07-14 23:32:55.591 [INFO][4197] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" Namespace="calico-system" Pod="calico-kube-controllers-dbdbfd467-d6jdf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0", GenerateName:"calico-kube-controllers-dbdbfd467-", Namespace:"calico-system", SelfLink:"", UID:"1258f5c1-e9aa-4693-bb82-d25ad59c0a09", ResourceVersion:"943", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"dbdbfd467", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e", Pod:"calico-kube-controllers-dbdbfd467-d6jdf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali6e3466c7419", MAC:"b2:5b:f6:1b:0a:0c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:32:55.636677 env[1252]: 2025-07-14 23:32:55.612 [INFO][4197] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e" Namespace="calico-system" Pod="calico-kube-controllers-dbdbfd467-d6jdf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--dbdbfd467--d6jdf-eth0" Jul 14 23:32:55.643306 env[1252]: time="2025-07-14T23:32:55.643284568Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7f7ff94-ttkwk,Uid:58fd77fd-b503-43f8-b3cb-8485972f220f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a\"" Jul 14 23:32:55.678432 env[1252]: time="2025-07-14T23:32:55.678331751Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:32:55.678543 env[1252]: time="2025-07-14T23:32:55.678525888Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:32:55.681852 env[1252]: time="2025-07-14T23:32:55.681832855Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:32:55.682181 env[1252]: time="2025-07-14T23:32:55.682161355Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e pid=4392 runtime=io.containerd.runc.v2 Jul 14 23:32:55.704358 systemd[1]: Started cri-containerd-9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e.scope. Jul 14 23:32:55.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.731000 audit: BPF prog-id=202 op=LOAD Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4392 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932373963343032356662626363343461323736396338313230353337 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4392 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932373963343032356662626363343461323736396338313230353337 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit: BPF prog-id=203 op=LOAD Jul 14 23:32:55.732000 audit[4404]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003c41e0 items=0 ppid=4392 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932373963343032356662626363343461323736396338313230353337 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit: BPF prog-id=204 op=LOAD Jul 14 23:32:55.732000 audit[4404]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003c4228 items=0 ppid=4392 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932373963343032356662626363343461323736396338313230353337 Jul 14 23:32:55.732000 audit: BPF prog-id=204 op=UNLOAD Jul 14 23:32:55.732000 audit: BPF prog-id=203 op=UNLOAD Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { perfmon } for pid=4404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit[4404]: AVC avc: denied { bpf } for pid=4404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:55.732000 audit: BPF prog-id=205 op=LOAD Jul 14 23:32:55.732000 audit[4404]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003c4638 items=0 ppid=4392 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:55.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932373963343032356662626363343461323736396338313230353337 Jul 14 23:32:55.733703 systemd-resolved[1201]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:32:55.764083 env[1252]: time="2025-07-14T23:32:55.764051540Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-dbdbfd467-d6jdf,Uid:1258f5c1-e9aa-4693-bb82-d25ad59c0a09,Namespace:calico-system,Attempt:1,} returns sandbox id \"9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e\"" Jul 14 23:32:56.719524 systemd-networkd[1061]: calidd55fac2ac0: Gained IPv6LL Jul 14 23:32:56.847460 systemd-networkd[1061]: cali63b4c44e150: Gained IPv6LL Jul 14 23:32:57.039464 systemd-networkd[1061]: cali8e9dfb13360: Gained IPv6LL Jul 14 23:32:57.357932 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1844380616.mount: Deactivated successfully. Jul 14 23:32:57.551521 systemd-networkd[1061]: cali6e3466c7419: Gained IPv6LL Jul 14 23:32:57.659000 audit[4430]: NETFILTER_CFG table=filter:117 family=2 entries=13 op=nft_register_rule pid=4430 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:57.669102 kernel: kauditd_printk_skb: 599 callbacks suppressed Jul 14 23:32:57.669167 kernel: audit: type=1325 audit(1752535977.659:1358): table=filter:117 family=2 entries=13 op=nft_register_rule pid=4430 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:57.691806 kernel: audit: type=1300 audit(1752535977.659:1358): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd67f8f1e0 a2=0 a3=7ffd67f8f1cc items=0 ppid=2203 pid=4430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:57.691856 kernel: audit: type=1327 audit(1752535977.659:1358): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:57.696161 kernel: audit: type=1325 audit(1752535977.674:1359): table=nat:118 family=2 entries=27 op=nft_register_chain pid=4430 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:57.696187 kernel: audit: type=1300 audit(1752535977.674:1359): arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffd67f8f1e0 a2=0 a3=7ffd67f8f1cc items=0 ppid=2203 pid=4430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:57.696205 kernel: audit: type=1327 audit(1752535977.674:1359): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:57.659000 audit[4430]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd67f8f1e0 a2=0 a3=7ffd67f8f1cc items=0 ppid=2203 pid=4430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:57.659000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:57.674000 audit[4430]: NETFILTER_CFG table=nat:118 family=2 entries=27 op=nft_register_chain pid=4430 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:32:57.674000 audit[4430]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffd67f8f1e0 a2=0 a3=7ffd67f8f1cc items=0 ppid=2203 pid=4430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:57.674000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:32:58.819717 env[1252]: time="2025-07-14T23:32:58.819040062Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:58.828608 env[1252]: time="2025-07-14T23:32:58.820647659Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:58.828608 env[1252]: time="2025-07-14T23:32:58.822927475Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:58.828608 env[1252]: time="2025-07-14T23:32:58.824504985Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 14 23:32:58.828608 env[1252]: time="2025-07-14T23:32:58.825014541Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:32:58.853689 env[1252]: time="2025-07-14T23:32:58.853654147Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 14 23:32:59.006813 env[1252]: time="2025-07-14T23:32:59.006783698Z" level=info msg="CreateContainer within sandbox \"092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 14 23:32:59.124982 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2779055794.mount: Deactivated successfully. Jul 14 23:32:59.166814 env[1252]: time="2025-07-14T23:32:59.166785801Z" level=info msg="CreateContainer within sandbox \"092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"8e9b886a2da0b8a318490f6b3f5c256202efbc8169667855ee465e8bfed1ed6f\"" Jul 14 23:32:59.168640 env[1252]: time="2025-07-14T23:32:59.168613842Z" level=info msg="StartContainer for \"8e9b886a2da0b8a318490f6b3f5c256202efbc8169667855ee465e8bfed1ed6f\"" Jul 14 23:32:59.225725 systemd[1]: Started cri-containerd-8e9b886a2da0b8a318490f6b3f5c256202efbc8169667855ee465e8bfed1ed6f.scope. Jul 14 23:32:59.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.257206 kernel: audit: type=1400 audit(1752535979.244:1360): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.257275 kernel: audit: type=1400 audit(1752535979.244:1361): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.257968 kernel: audit: type=1400 audit(1752535979.244:1362): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.258502 kernel: audit: type=1400 audit(1752535979.244:1363): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.246000 audit: BPF prog-id=206 op=LOAD Jul 14 23:32:59.253000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.253000 audit[4444]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3970 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:59.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865396238383661326461306238613331383439306636623366356332 Jul 14 23:32:59.253000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.253000 audit[4444]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3970 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:59.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865396238383661326461306238613331383439306636623366356332 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit: BPF prog-id=207 op=LOAD Jul 14 23:32:59.256000 audit[4444]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c41c0 items=0 ppid=3970 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:59.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865396238383661326461306238613331383439306636623366356332 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit: BPF prog-id=208 op=LOAD Jul 14 23:32:59.256000 audit[4444]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c4208 items=0 ppid=3970 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:59.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865396238383661326461306238613331383439306636623366356332 Jul 14 23:32:59.256000 audit: BPF prog-id=208 op=UNLOAD Jul 14 23:32:59.256000 audit: BPF prog-id=207 op=UNLOAD Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:32:59.256000 audit: BPF prog-id=209 op=LOAD Jul 14 23:32:59.256000 audit[4444]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c4618 items=0 ppid=3970 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:32:59.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865396238383661326461306238613331383439306636623366356332 Jul 14 23:32:59.282445 env[1252]: time="2025-07-14T23:32:59.282415208Z" level=info msg="StartContainer for \"8e9b886a2da0b8a318490f6b3f5c256202efbc8169667855ee465e8bfed1ed6f\" returns successfully" Jul 14 23:33:00.199306 kubelet[2107]: I0714 23:33:00.148429 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-7b5b449f6c-n9cnc" podStartSLOduration=7.612014282 podStartE2EDuration="12.136853252s" podCreationTimestamp="2025-07-14 23:32:48 +0000 UTC" firstStartedPulling="2025-07-14 23:32:49.26381763 +0000 UTC m=+41.145748419" lastFinishedPulling="2025-07-14 23:32:53.788656601 +0000 UTC m=+45.670587389" observedRunningTime="2025-07-14 23:32:56.963041168 +0000 UTC m=+48.844971963" watchObservedRunningTime="2025-07-14 23:33:00.136853252 +0000 UTC m=+52.018784054" Jul 14 23:33:00.200000 audit[4490]: NETFILTER_CFG table=filter:119 family=2 entries=12 op=nft_register_rule pid=4490 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:00.200000 audit[4490]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe0ceaf5a0 a2=0 a3=7ffe0ceaf58c items=0 ppid=2203 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:00.200000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:00.208000 audit[4490]: NETFILTER_CFG table=nat:120 family=2 entries=22 op=nft_register_rule pid=4490 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:00.208000 audit[4490]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe0ceaf5a0 a2=0 a3=7ffe0ceaf58c items=0 ppid=2203 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:00.208000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:00.216454 kubelet[2107]: I0714 23:33:00.199880 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-qchs2" podStartSLOduration=29.575354638 podStartE2EDuration="35.199868617s" podCreationTimestamp="2025-07-14 23:32:25 +0000 UTC" firstStartedPulling="2025-07-14 23:32:53.219087782 +0000 UTC m=+45.101018572" lastFinishedPulling="2025-07-14 23:32:58.843601761 +0000 UTC m=+50.725532551" observedRunningTime="2025-07-14 23:33:00.130338445 +0000 UTC m=+52.012269239" watchObservedRunningTime="2025-07-14 23:33:00.199868617 +0000 UTC m=+52.081799516" Jul 14 23:33:00.498934 env[1252]: time="2025-07-14T23:33:00.498746329Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:00.499776 env[1252]: time="2025-07-14T23:33:00.499758921Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:00.500612 env[1252]: time="2025-07-14T23:33:00.500593189Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:00.502683 env[1252]: time="2025-07-14T23:33:00.502662088Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 14 23:33:00.503273 env[1252]: time="2025-07-14T23:33:00.503071031Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:00.519731 env[1252]: time="2025-07-14T23:33:00.519703006Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 14 23:33:00.520491 env[1252]: time="2025-07-14T23:33:00.520475560Z" level=info msg="CreateContainer within sandbox \"1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 14 23:33:00.553132 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4205039595.mount: Deactivated successfully. Jul 14 23:33:00.569396 env[1252]: time="2025-07-14T23:33:00.569367876Z" level=info msg="CreateContainer within sandbox \"1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"6dcda548b8e59ad0383bbda9c02e873f38b2295bcf0c3ec7073711d754037d6f\"" Jul 14 23:33:00.569945 env[1252]: time="2025-07-14T23:33:00.569925750Z" level=info msg="StartContainer for \"6dcda548b8e59ad0383bbda9c02e873f38b2295bcf0c3ec7073711d754037d6f\"" Jul 14 23:33:00.591735 systemd[1]: Started cri-containerd-6dcda548b8e59ad0383bbda9c02e873f38b2295bcf0c3ec7073711d754037d6f.scope. Jul 14 23:33:00.604000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.604000 audit[4502]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f301099da88 items=0 ppid=4222 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:00.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664636461353438623865353961643033383362626461396330326538 Jul 14 23:33:00.604000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.604000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.604000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.604000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.604000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.604000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.604000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.604000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.604000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.604000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.604000 audit: BPF prog-id=210 op=LOAD Jul 14 23:33:00.604000 audit[4502]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00022d068 items=0 ppid=4222 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:00.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664636461353438623865353961643033383362626461396330326538 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit: BPF prog-id=211 op=LOAD Jul 14 23:33:00.605000 audit[4502]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00022d0b8 items=0 ppid=4222 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:00.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664636461353438623865353961643033383362626461396330326538 Jul 14 23:33:00.605000 audit: BPF prog-id=211 op=UNLOAD Jul 14 23:33:00.605000 audit: BPF prog-id=210 op=UNLOAD Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { perfmon } for pid=4502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit[4502]: AVC avc: denied { bpf } for pid=4502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:00.605000 audit: BPF prog-id=212 op=LOAD Jul 14 23:33:00.605000 audit[4502]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00022d148 items=0 ppid=4222 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:00.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664636461353438623865353961643033383362626461396330326538 Jul 14 23:33:00.616801 env[1252]: time="2025-07-14T23:33:00.616777942Z" level=info msg="StartContainer for \"6dcda548b8e59ad0383bbda9c02e873f38b2295bcf0c3ec7073711d754037d6f\" returns successfully" Jul 14 23:33:01.149000 audit[4551]: NETFILTER_CFG table=filter:121 family=2 entries=11 op=nft_register_rule pid=4551 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:01.149000 audit[4551]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe79778450 a2=0 a3=7ffe7977843c items=0 ppid=2203 pid=4551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:01.149000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:01.155000 audit[4551]: NETFILTER_CFG table=nat:122 family=2 entries=29 op=nft_register_chain pid=4551 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:01.155000 audit[4551]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffe79778450 a2=0 a3=7ffe7977843c items=0 ppid=2203 pid=4551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:01.155000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:01.551759 systemd[1]: run-containerd-runc-k8s.io-6dcda548b8e59ad0383bbda9c02e873f38b2295bcf0c3ec7073711d754037d6f-runc.1kI4BS.mount: Deactivated successfully. Jul 14 23:33:02.090000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:02.090000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:02.090000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0016f5d00 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:33:02.090000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:33:02.090000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002ea2390 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:33:02.090000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:33:03.217000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:03.222456 kernel: kauditd_printk_skb: 114 callbacks suppressed Jul 14 23:33:03.227014 kernel: audit: type=1400 audit(1752535983.217:1390): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:03.227062 kernel: audit: type=1300 audit(1752535983.217:1390): arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c01195c2d0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:33:03.217000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c01195c2d0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:33:03.231387 kernel: audit: type=1327 audit(1752535983.217:1390): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:33:03.234789 kernel: audit: type=1400 audit(1752535983.226:1391): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:03.238814 kernel: audit: type=1300 audit(1752535983.226:1391): arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00e8aa9e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:33:03.249164 kernel: audit: type=1327 audit(1752535983.226:1391): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:33:03.249193 kernel: audit: type=1400 audit(1752535983.238:1392): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:03.249229 kernel: audit: type=1300 audit(1752535983.238:1392): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c010c1d410 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:33:03.217000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:33:03.249425 kernel: audit: type=1327 audit(1752535983.238:1392): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:33:03.226000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:03.226000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00e8aa9e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:33:03.226000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:33:03.238000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:03.264452 kernel: audit: type=1400 audit(1752535983.259:1393): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:03.238000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c010c1d410 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:33:03.238000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:33:03.259000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:03.259000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c01195c330 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:33:03.259000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:33:03.314000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:03.314000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00e8aab60 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:33:03.314000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:33:03.314000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:03.314000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c01195c450 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:33:03.314000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:33:04.105906 env[1252]: time="2025-07-14T23:33:04.105868317Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:04.110866 env[1252]: time="2025-07-14T23:33:04.109209951Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:04.110866 env[1252]: time="2025-07-14T23:33:04.110636514Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:04.112221 env[1252]: time="2025-07-14T23:33:04.112196994Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:04.112491 env[1252]: time="2025-07-14T23:33:04.112466904Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 14 23:33:04.113907 env[1252]: time="2025-07-14T23:33:04.113888450Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 14 23:33:04.135925 env[1252]: time="2025-07-14T23:33:04.135893769Z" level=info msg="CreateContainer within sandbox \"4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 23:33:04.156136 env[1252]: time="2025-07-14T23:33:04.156108177Z" level=info msg="CreateContainer within sandbox \"4322fd7bfd4dc0bb0e840e7444795c46e28f5e2a1e910836a394a49555f8b65a\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"cdb790b11733e911ec077869d0daa5cb58c31d831cbd44d272d56ca0c431f5f5\"" Jul 14 23:33:04.160477 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3477984905.mount: Deactivated successfully. Jul 14 23:33:04.165534 env[1252]: time="2025-07-14T23:33:04.162462905Z" level=info msg="StartContainer for \"cdb790b11733e911ec077869d0daa5cb58c31d831cbd44d272d56ca0c431f5f5\"" Jul 14 23:33:04.231328 systemd[1]: run-containerd-runc-k8s.io-cdb790b11733e911ec077869d0daa5cb58c31d831cbd44d272d56ca0c431f5f5-runc.ioaM87.mount: Deactivated successfully. Jul 14 23:33:04.233237 systemd[1]: Started cri-containerd-cdb790b11733e911ec077869d0daa5cb58c31d831cbd44d272d56ca0c431f5f5.scope. Jul 14 23:33:04.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit: BPF prog-id=213 op=LOAD Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4336 pid=4559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:04.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364623739306231313733336539313165633037373836396430646161 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=4336 pid=4559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:04.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364623739306231313733336539313165633037373836396430646161 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit: BPF prog-id=214 op=LOAD Jul 14 23:33:04.248000 audit[4559]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000024460 items=0 ppid=4336 pid=4559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:04.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364623739306231313733336539313165633037373836396430646161 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit: BPF prog-id=215 op=LOAD Jul 14 23:33:04.248000 audit[4559]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0000244a8 items=0 ppid=4336 pid=4559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:04.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364623739306231313733336539313165633037373836396430646161 Jul 14 23:33:04.248000 audit: BPF prog-id=215 op=UNLOAD Jul 14 23:33:04.248000 audit: BPF prog-id=214 op=UNLOAD Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { perfmon } for pid=4559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit[4559]: AVC avc: denied { bpf } for pid=4559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:04.248000 audit: BPF prog-id=216 op=LOAD Jul 14 23:33:04.248000 audit[4559]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0000248b8 items=0 ppid=4336 pid=4559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:04.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364623739306231313733336539313165633037373836396430646161 Jul 14 23:33:04.276811 env[1252]: time="2025-07-14T23:33:04.276784056Z" level=info msg="StartContainer for \"cdb790b11733e911ec077869d0daa5cb58c31d831cbd44d272d56ca0c431f5f5\" returns successfully" Jul 14 23:33:05.292147 kubelet[2107]: I0714 23:33:05.292089 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7f7ff94-ttkwk" podStartSLOduration=33.836184089 podStartE2EDuration="41.257917173s" podCreationTimestamp="2025-07-14 23:32:24 +0000 UTC" firstStartedPulling="2025-07-14 23:32:56.692062629 +0000 UTC m=+48.573993417" lastFinishedPulling="2025-07-14 23:33:04.113795701 +0000 UTC m=+55.995726501" observedRunningTime="2025-07-14 23:33:05.232204633 +0000 UTC m=+57.114135445" watchObservedRunningTime="2025-07-14 23:33:05.257917173 +0000 UTC m=+57.139847963" Jul 14 23:33:05.453000 audit[4593]: NETFILTER_CFG table=filter:123 family=2 entries=10 op=nft_register_rule pid=4593 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:05.453000 audit[4593]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd6f813840 a2=0 a3=7ffd6f81382c items=0 ppid=2203 pid=4593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:05.453000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:05.458000 audit[4593]: NETFILTER_CFG table=nat:124 family=2 entries=24 op=nft_register_rule pid=4593 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:05.458000 audit[4593]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffd6f813840 a2=0 a3=7ffd6f81382c items=0 ppid=2203 pid=4593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:05.458000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:06.128000 audit[4570]: AVC avc: denied { watch } for pid=4570 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.2686497968/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c108,c306 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c108,c306 tclass=file permissive=0 Jul 14 23:33:06.128000 audit[4570]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000ccb7a0 a2=fc6 a3=0 items=0 ppid=4336 pid=4570 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c108,c306 key=(null) Jul 14 23:33:06.128000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:33:06.152315 kubelet[2107]: I0714 23:33:06.152285 2107 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:33:07.803000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:07.803000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0017671a0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:33:07.803000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:33:07.830000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:07.830000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001767200 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:33:07.830000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:33:07.833000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:07.833000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0016146c0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:33:07.833000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:33:07.859000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:33:07.859000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0016146e0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:33:07.859000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:33:08.467006 env[1252]: time="2025-07-14T23:33:08.466964505Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:08.517794 env[1252]: time="2025-07-14T23:33:08.517768464Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:08.528770 env[1252]: time="2025-07-14T23:33:08.528749209Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:08.538412 env[1252]: time="2025-07-14T23:33:08.538388161Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:08.538801 env[1252]: time="2025-07-14T23:33:08.538780768Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 14 23:33:08.918098 env[1252]: time="2025-07-14T23:33:08.917952527Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 14 23:33:09.001442 env[1252]: time="2025-07-14T23:33:09.001238860Z" level=info msg="StopPodSandbox for \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\"" Jul 14 23:33:09.083999 env[1252]: time="2025-07-14T23:33:09.083869168Z" level=info msg="CreateContainer within sandbox \"9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 14 23:33:09.093020 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3313524112.mount: Deactivated successfully. Jul 14 23:33:09.138624 env[1252]: time="2025-07-14T23:33:09.120461200Z" level=info msg="CreateContainer within sandbox \"9279c4025fbbcc44a2769c81205379065c95cd5dfbebd96d2bdbaeeadf34c68e\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"f74488d454d7f06826dbb9a02f004fb3c5af2fd27cfb939889f2f423fd102398\"" Jul 14 23:33:09.138624 env[1252]: time="2025-07-14T23:33:09.127319299Z" level=info msg="StartContainer for \"f74488d454d7f06826dbb9a02f004fb3c5af2fd27cfb939889f2f423fd102398\"" Jul 14 23:33:09.153562 systemd[1]: Started cri-containerd-f74488d454d7f06826dbb9a02f004fb3c5af2fd27cfb939889f2f423fd102398.scope. Jul 14 23:33:09.169414 kernel: kauditd_printk_skb: 86 callbacks suppressed Jul 14 23:33:09.193668 kernel: audit: type=1400 audit(1752535989.164:1421): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.212910 kernel: audit: type=1400 audit(1752535989.164:1422): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.213021 kernel: audit: type=1400 audit(1752535989.164:1423): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.213049 kernel: audit: type=1400 audit(1752535989.164:1424): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.226137 kernel: audit: type=1400 audit(1752535989.164:1425): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.226179 kernel: audit: type=1400 audit(1752535989.164:1426): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.226198 kernel: audit: type=1400 audit(1752535989.164:1427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.231115 kernel: audit: type=1400 audit(1752535989.164:1428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.231141 kernel: audit: type=1400 audit(1752535989.164:1429): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.231158 kernel: audit: type=1400 audit(1752535989.164:1430): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.164000 audit: BPF prog-id=217 op=LOAD Jul 14 23:33:09.169000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.169000 audit[4618]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4392 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:09.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637343438386434353464376630363832366462623961303266303034 Jul 14 23:33:09.169000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.169000 audit[4618]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=4392 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:09.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637343438386434353464376630363832366462623961303266303034 Jul 14 23:33:09.169000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.169000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.169000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.169000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.169000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.169000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.169000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.169000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.169000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.169000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.169000 audit: BPF prog-id=218 op=LOAD Jul 14 23:33:09.169000 audit[4618]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001a3de0 items=0 ppid=4392 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:09.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637343438386434353464376630363832366462623961303266303034 Jul 14 23:33:09.173000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.173000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.173000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.173000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.173000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.173000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.173000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.173000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.173000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.173000 audit: BPF prog-id=219 op=LOAD Jul 14 23:33:09.173000 audit[4618]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0001a3e28 items=0 ppid=4392 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:09.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637343438386434353464376630363832366462623961303266303034 Jul 14 23:33:09.178000 audit: BPF prog-id=219 op=UNLOAD Jul 14 23:33:09.178000 audit: BPF prog-id=218 op=UNLOAD Jul 14 23:33:09.178000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.178000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.178000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.178000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.178000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.178000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.178000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.178000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.178000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.178000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:09.178000 audit: BPF prog-id=220 op=LOAD Jul 14 23:33:09.178000 audit[4618]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0001c4238 items=0 ppid=4392 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:09.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637343438386434353464376630363832366462623961303266303034 Jul 14 23:33:09.253846 env[1252]: time="2025-07-14T23:33:09.213904456Z" level=info msg="StartContainer for \"f74488d454d7f06826dbb9a02f004fb3c5af2fd27cfb939889f2f423fd102398\" returns successfully" Jul 14 23:33:10.614449 env[1252]: time="2025-07-14T23:33:10.614404390Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:10.783398 env[1252]: time="2025-07-14T23:33:10.646172894Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:10.783398 env[1252]: time="2025-07-14T23:33:10.655805367Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:10.783398 env[1252]: time="2025-07-14T23:33:10.669389441Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:10.783398 env[1252]: time="2025-07-14T23:33:10.669632123Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 14 23:33:11.395134 env[1252]: 2025-07-14 23:33:09.908 [WARNING][4610] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--svtmh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"50a79248-0bb4-4c89-913f-a33de4da7041", ResourceVersion:"923", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798", Pod:"coredns-668d6bf9bc-svtmh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali32dc0dd80c9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:33:11.395134 env[1252]: 2025-07-14 23:33:09.913 [INFO][4610] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:33:11.395134 env[1252]: 2025-07-14 23:33:09.913 [INFO][4610] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" iface="eth0" netns="" Jul 14 23:33:11.395134 env[1252]: 2025-07-14 23:33:09.913 [INFO][4610] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:33:11.395134 env[1252]: 2025-07-14 23:33:09.913 [INFO][4610] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:33:11.395134 env[1252]: 2025-07-14 23:33:11.279 [INFO][4664] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" HandleID="k8s-pod-network.576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Workload="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:33:11.395134 env[1252]: 2025-07-14 23:33:11.299 [INFO][4664] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:33:11.395134 env[1252]: 2025-07-14 23:33:11.299 [INFO][4664] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:33:11.395134 env[1252]: 2025-07-14 23:33:11.373 [WARNING][4664] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" HandleID="k8s-pod-network.576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Workload="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:33:11.395134 env[1252]: 2025-07-14 23:33:11.373 [INFO][4664] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" HandleID="k8s-pod-network.576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Workload="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:33:11.395134 env[1252]: 2025-07-14 23:33:11.376 [INFO][4664] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:33:11.395134 env[1252]: 2025-07-14 23:33:11.385 [INFO][4610] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:33:11.408725 env[1252]: time="2025-07-14T23:33:11.395156573Z" level=info msg="TearDown network for sandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\" successfully" Jul 14 23:33:11.408725 env[1252]: time="2025-07-14T23:33:11.395176508Z" level=info msg="StopPodSandbox for \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\" returns successfully" Jul 14 23:33:11.419151 kubelet[2107]: I0714 23:33:11.411581 2107 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:33:11.483792 env[1252]: time="2025-07-14T23:33:11.483767433Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 14 23:33:11.612829 env[1252]: time="2025-07-14T23:33:11.612797213Z" level=info msg="RemovePodSandbox for \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\"" Jul 14 23:33:11.612947 env[1252]: time="2025-07-14T23:33:11.612833181Z" level=info msg="Forcibly stopping sandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\"" Jul 14 23:33:11.746880 env[1252]: time="2025-07-14T23:33:11.746744006Z" level=info msg="CreateContainer within sandbox \"290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 23:33:11.759572 env[1252]: time="2025-07-14T23:33:11.759543169Z" level=info msg="CreateContainer within sandbox \"290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"72af8ac246d80e3a8b4d609a4709439a94474db4f6fa91b825363b8732ffe026\"" Jul 14 23:33:11.774771 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount686203341.mount: Deactivated successfully. Jul 14 23:33:11.796655 env[1252]: time="2025-07-14T23:33:11.782246470Z" level=info msg="StartContainer for \"72af8ac246d80e3a8b4d609a4709439a94474db4f6fa91b825363b8732ffe026\"" Jul 14 23:33:11.898987 systemd[1]: Started cri-containerd-72af8ac246d80e3a8b4d609a4709439a94474db4f6fa91b825363b8732ffe026.scope. Jul 14 23:33:11.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit: BPF prog-id=221 op=LOAD Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4285 pid=4690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:11.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732616638616332343664383065336138623464363039613437303934 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4285 pid=4690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:11.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732616638616332343664383065336138623464363039613437303934 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit: BPF prog-id=222 op=LOAD Jul 14 23:33:11.922000 audit[4690]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a12d0 items=0 ppid=4285 pid=4690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:11.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732616638616332343664383065336138623464363039613437303934 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.922000 audit: BPF prog-id=223 op=LOAD Jul 14 23:33:11.922000 audit[4690]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a1318 items=0 ppid=4285 pid=4690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:11.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732616638616332343664383065336138623464363039613437303934 Jul 14 23:33:11.923000 audit: BPF prog-id=223 op=UNLOAD Jul 14 23:33:11.923000 audit: BPF prog-id=222 op=UNLOAD Jul 14 23:33:11.923000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.923000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.923000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.923000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.923000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.923000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.923000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.923000 audit[4690]: AVC avc: denied { perfmon } for pid=4690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.923000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.923000 audit[4690]: AVC avc: denied { bpf } for pid=4690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:11.923000 audit: BPF prog-id=224 op=LOAD Jul 14 23:33:11.923000 audit[4690]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a1728 items=0 ppid=4285 pid=4690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:11.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732616638616332343664383065336138623464363039613437303934 Jul 14 23:33:11.983944 env[1252]: time="2025-07-14T23:33:11.951897797Z" level=info msg="StartContainer for \"72af8ac246d80e3a8b4d609a4709439a94474db4f6fa91b825363b8732ffe026\" returns successfully" Jul 14 23:33:12.252547 kubelet[2107]: I0714 23:33:12.247178 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-dbdbfd467-d6jdf" podStartSLOduration=33.198981158 podStartE2EDuration="45.236833272s" podCreationTimestamp="2025-07-14 23:32:27 +0000 UTC" firstStartedPulling="2025-07-14 23:32:56.794019949 +0000 UTC m=+48.675950738" lastFinishedPulling="2025-07-14 23:33:08.831872059 +0000 UTC m=+60.713802852" observedRunningTime="2025-07-14 23:33:12.2131447 +0000 UTC m=+64.095075507" watchObservedRunningTime="2025-07-14 23:33:12.236833272 +0000 UTC m=+64.118764062" Jul 14 23:33:12.783104 systemd[1]: run-containerd-runc-k8s.io-72af8ac246d80e3a8b4d609a4709439a94474db4f6fa91b825363b8732ffe026-runc.vVCNiJ.mount: Deactivated successfully. Jul 14 23:33:12.994000 audit[4730]: NETFILTER_CFG table=filter:125 family=2 entries=9 op=nft_register_rule pid=4730 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:12.994000 audit[4730]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd34b60580 a2=0 a3=7ffd34b6056c items=0 ppid=2203 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:12.994000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:13.000000 audit[4730]: NETFILTER_CFG table=nat:126 family=2 entries=31 op=nft_register_chain pid=4730 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:13.000000 audit[4730]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffd34b60580 a2=0 a3=7ffd34b6056c items=0 ppid=2203 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:13.000000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:13.547491 env[1252]: 2025-07-14 23:33:12.197 [WARNING][4681] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--svtmh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"50a79248-0bb4-4c89-913f-a33de4da7041", ResourceVersion:"923", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"63b546df43fb0909333ba8792a8b1a60319933a94d7ca10908db77ceb1aae798", Pod:"coredns-668d6bf9bc-svtmh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali32dc0dd80c9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:33:13.547491 env[1252]: 2025-07-14 23:33:12.200 [INFO][4681] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:33:13.547491 env[1252]: 2025-07-14 23:33:12.200 [INFO][4681] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" iface="eth0" netns="" Jul 14 23:33:13.547491 env[1252]: 2025-07-14 23:33:12.200 [INFO][4681] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:33:13.547491 env[1252]: 2025-07-14 23:33:12.200 [INFO][4681] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:33:13.547491 env[1252]: 2025-07-14 23:33:13.184 [INFO][4721] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" HandleID="k8s-pod-network.576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Workload="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:33:13.547491 env[1252]: 2025-07-14 23:33:13.258 [INFO][4721] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:33:13.547491 env[1252]: 2025-07-14 23:33:13.264 [INFO][4721] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:33:13.547491 env[1252]: 2025-07-14 23:33:13.504 [WARNING][4721] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" HandleID="k8s-pod-network.576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Workload="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:33:13.547491 env[1252]: 2025-07-14 23:33:13.504 [INFO][4721] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" HandleID="k8s-pod-network.576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Workload="localhost-k8s-coredns--668d6bf9bc--svtmh-eth0" Jul 14 23:33:13.547491 env[1252]: 2025-07-14 23:33:13.509 [INFO][4721] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:33:13.547491 env[1252]: 2025-07-14 23:33:13.527 [INFO][4681] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27" Jul 14 23:33:13.547491 env[1252]: time="2025-07-14T23:33:13.546807459Z" level=info msg="TearDown network for sandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\" successfully" Jul 14 23:33:13.612054 env[1252]: time="2025-07-14T23:33:13.554825241Z" level=info msg="RemovePodSandbox \"576799ab06fa6e73281a8714e653df0a2e1da5b97b8b910bfa55f00e5f38ca27\" returns successfully" Jul 14 23:33:14.484000 audit[4740]: NETFILTER_CFG table=filter:127 family=2 entries=8 op=nft_register_rule pid=4740 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:14.504111 kernel: kauditd_printk_skb: 110 callbacks suppressed Jul 14 23:33:14.569672 kernel: audit: type=1325 audit(1752535994.484:1459): table=filter:127 family=2 entries=8 op=nft_register_rule pid=4740 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:14.588482 kernel: audit: type=1300 audit(1752535994.484:1459): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff47366f40 a2=0 a3=7fff47366f2c items=0 ppid=2203 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:14.599819 kernel: audit: type=1327 audit(1752535994.484:1459): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:14.599856 kernel: audit: type=1325 audit(1752535994.497:1460): table=nat:128 family=2 entries=34 op=nft_register_rule pid=4740 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:14.599874 kernel: audit: type=1300 audit(1752535994.497:1460): arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7fff47366f40 a2=0 a3=7fff47366f2c items=0 ppid=2203 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:14.599893 kernel: audit: type=1327 audit(1752535994.497:1460): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:14.484000 audit[4740]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff47366f40 a2=0 a3=7fff47366f2c items=0 ppid=2203 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:14.484000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:14.497000 audit[4740]: NETFILTER_CFG table=nat:128 family=2 entries=34 op=nft_register_rule pid=4740 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:14.497000 audit[4740]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7fff47366f40 a2=0 a3=7fff47366f2c items=0 ppid=2203 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:14.497000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:14.699843 env[1252]: time="2025-07-14T23:33:14.507473907Z" level=info msg="StopPodSandbox for \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\"" Jul 14 23:33:14.765690 env[1252]: time="2025-07-14T23:33:14.765624663Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:14.771602 env[1252]: time="2025-07-14T23:33:14.771573317Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:14.774310 env[1252]: time="2025-07-14T23:33:14.774291764Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:14.776972 env[1252]: time="2025-07-14T23:33:14.776956161Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:33:14.777462 env[1252]: time="2025-07-14T23:33:14.777189775Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 14 23:33:15.567530 kubelet[2107]: E0714 23:33:15.558078 2107 kubelet.go:2573] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.021s" Jul 14 23:33:15.841135 kubelet[2107]: I0714 23:33:15.841075 2107 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:33:15.870408 kubelet[2107]: I0714 23:33:15.833726 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7f7ff94-nzt6j" podStartSLOduration=36.915596945 podStartE2EDuration="51.697744834s" podCreationTimestamp="2025-07-14 23:32:24 +0000 UTC" firstStartedPulling="2025-07-14 23:32:56.624497258 +0000 UTC m=+48.506428045" lastFinishedPulling="2025-07-14 23:33:11.406645144 +0000 UTC m=+63.288575934" observedRunningTime="2025-07-14 23:33:14.336804414 +0000 UTC m=+66.218735209" watchObservedRunningTime="2025-07-14 23:33:15.697744834 +0000 UTC m=+67.579675625" Jul 14 23:33:16.020415 env[1252]: time="2025-07-14T23:33:16.020381735Z" level=info msg="CreateContainer within sandbox \"1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 14 23:33:16.092547 env[1252]: time="2025-07-14T23:33:16.092476062Z" level=info msg="CreateContainer within sandbox \"1994dc7660771f420442c037f31af5c77467c7fd4d596d5faec2821cba0b3c66\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"d448b91139eff29475e620a5e68cd0980d2f61834360464adbcb26c1449f2bf3\"" Jul 14 23:33:16.125359 env[1252]: time="2025-07-14T23:33:16.125318079Z" level=info msg="StartContainer for \"d448b91139eff29475e620a5e68cd0980d2f61834360464adbcb26c1449f2bf3\"" Jul 14 23:33:16.281816 systemd[1]: Started cri-containerd-d448b91139eff29475e620a5e68cd0980d2f61834360464adbcb26c1449f2bf3.scope. Jul 14 23:33:16.339453 kernel: audit: type=1400 audit(1752535996.304:1461): avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.339524 kernel: audit: type=1300 audit(1752535996.304:1461): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f2a646aa138 items=0 ppid=4222 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:16.345534 kernel: audit: type=1327 audit(1752535996.304:1461): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434343862393131333965666632393437356536323061356536386364 Jul 14 23:33:16.352967 kernel: audit: type=1400 audit(1752535996.304:1462): avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f2a646aa138 items=0 ppid=4222 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:16.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434343862393131333965666632393437356536323061356536386364 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit: BPF prog-id=225 op=LOAD Jul 14 23:33:16.304000 audit[4785]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000384688 items=0 ppid=4222 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:16.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434343862393131333965666632393437356536323061356536386364 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit: BPF prog-id=226 op=LOAD Jul 14 23:33:16.304000 audit[4785]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003846d8 items=0 ppid=4222 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:16.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434343862393131333965666632393437356536323061356536386364 Jul 14 23:33:16.304000 audit: BPF prog-id=226 op=UNLOAD Jul 14 23:33:16.304000 audit: BPF prog-id=225 op=UNLOAD Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:33:16.304000 audit: BPF prog-id=227 op=LOAD Jul 14 23:33:16.304000 audit[4785]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000384768 items=0 ppid=4222 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:16.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434343862393131333965666632393437356536323061356536386364 Jul 14 23:33:16.574634 env[1252]: time="2025-07-14T23:33:16.360051512Z" level=info msg="StartContainer for \"d448b91139eff29475e620a5e68cd0980d2f61834360464adbcb26c1449f2bf3\" returns successfully" Jul 14 23:33:17.584000 audit[4705]: AVC avc: denied { watch } for pid=4705 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.4050615971/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c106,c183 tclass=file permissive=0 Jul 14 23:33:17.584000 audit[4705]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001d10420 a2=fc6 a3=0 items=0 ppid=4285 pid=4705 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 key=(null) Jul 14 23:33:17.584000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:33:18.014313 env[1252]: 2025-07-14 23:33:16.104 [WARNING][4768] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0", GenerateName:"calico-apiserver-7f7ff94-", Namespace:"calico-apiserver", SelfLink:"", UID:"aeb17c86-3da8-414a-a622-bb7dd1653fb3", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7f7ff94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423", Pod:"calico-apiserver-7f7ff94-nzt6j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali63b4c44e150", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:33:18.014313 env[1252]: 2025-07-14 23:33:16.109 [INFO][4768] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:33:18.014313 env[1252]: 2025-07-14 23:33:16.109 [INFO][4768] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" iface="eth0" netns="" Jul 14 23:33:18.014313 env[1252]: 2025-07-14 23:33:16.109 [INFO][4768] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:33:18.014313 env[1252]: 2025-07-14 23:33:16.109 [INFO][4768] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:33:18.014313 env[1252]: 2025-07-14 23:33:17.787 [INFO][4777] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" HandleID="k8s-pod-network.e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Workload="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:33:18.014313 env[1252]: 2025-07-14 23:33:17.801 [INFO][4777] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:33:18.014313 env[1252]: 2025-07-14 23:33:17.802 [INFO][4777] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:33:18.014313 env[1252]: 2025-07-14 23:33:17.925 [WARNING][4777] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" HandleID="k8s-pod-network.e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Workload="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:33:18.014313 env[1252]: 2025-07-14 23:33:17.925 [INFO][4777] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" HandleID="k8s-pod-network.e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Workload="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:33:18.014313 env[1252]: 2025-07-14 23:33:17.927 [INFO][4777] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:33:18.014313 env[1252]: 2025-07-14 23:33:17.943 [INFO][4768] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:33:18.014313 env[1252]: time="2025-07-14T23:33:18.014292999Z" level=info msg="TearDown network for sandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\" successfully" Jul 14 23:33:18.014313 env[1252]: time="2025-07-14T23:33:18.014326884Z" level=info msg="StopPodSandbox for \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\" returns successfully" Jul 14 23:33:18.862791 env[1252]: time="2025-07-14T23:33:18.862493189Z" level=info msg="RemovePodSandbox for \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\"" Jul 14 23:33:18.862791 env[1252]: time="2025-07-14T23:33:18.862520702Z" level=info msg="Forcibly stopping sandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\"" Jul 14 23:33:22.627419 kubelet[2107]: I0714 23:33:22.321866 2107 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 14 23:33:22.766534 env[1252]: 2025-07-14 23:33:20.613 [WARNING][4829] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0", GenerateName:"calico-apiserver-7f7ff94-", Namespace:"calico-apiserver", SelfLink:"", UID:"aeb17c86-3da8-414a-a622-bb7dd1653fb3", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7f7ff94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"290ad71fa583fa9399879582f122319f6535e560c9c62cc1234fba1bd9d91423", Pod:"calico-apiserver-7f7ff94-nzt6j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali63b4c44e150", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:33:22.766534 env[1252]: 2025-07-14 23:33:20.626 [INFO][4829] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:33:22.766534 env[1252]: 2025-07-14 23:33:20.627 [INFO][4829] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" iface="eth0" netns="" Jul 14 23:33:22.766534 env[1252]: 2025-07-14 23:33:20.627 [INFO][4829] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:33:22.766534 env[1252]: 2025-07-14 23:33:20.627 [INFO][4829] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:33:22.766534 env[1252]: 2025-07-14 23:33:22.508 [INFO][4858] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" HandleID="k8s-pod-network.e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Workload="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:33:22.766534 env[1252]: 2025-07-14 23:33:22.540 [INFO][4858] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:33:22.766534 env[1252]: 2025-07-14 23:33:22.550 [INFO][4858] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:33:22.766534 env[1252]: 2025-07-14 23:33:22.652 [WARNING][4858] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" HandleID="k8s-pod-network.e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Workload="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:33:22.766534 env[1252]: 2025-07-14 23:33:22.652 [INFO][4858] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" HandleID="k8s-pod-network.e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Workload="localhost-k8s-calico--apiserver--7f7ff94--nzt6j-eth0" Jul 14 23:33:22.766534 env[1252]: 2025-07-14 23:33:22.655 [INFO][4858] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:33:22.766534 env[1252]: 2025-07-14 23:33:22.734 [INFO][4829] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd" Jul 14 23:33:22.766534 env[1252]: time="2025-07-14T23:33:22.758078591Z" level=info msg="TearDown network for sandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\" successfully" Jul 14 23:33:22.783787 env[1252]: time="2025-07-14T23:33:22.778379521Z" level=info msg="RemovePodSandbox \"e427aa1f2c3193ea4497fbc7d9937a00676dd35fefaefec75149f3c47f2403cd\" returns successfully" Jul 14 23:33:23.201395 kubelet[2107]: I0714 23:33:23.201308 2107 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 14 23:33:23.248401 kubelet[2107]: I0714 23:33:23.248375 2107 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:33:23.420881 kubelet[2107]: E0714 23:33:23.417549 2107 kubelet.go:2573] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.92s" Jul 14 23:33:23.635572 env[1252]: time="2025-07-14T23:33:23.635424617Z" level=info msg="StopPodSandbox for \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\"" Jul 14 23:33:24.161187 kubelet[2107]: I0714 23:33:24.130012 2107 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-dgp89" podStartSLOduration=37.876960938 podStartE2EDuration="58.022487989s" podCreationTimestamp="2025-07-14 23:32:26 +0000 UTC" firstStartedPulling="2025-07-14 23:32:55.428922292 +0000 UTC m=+47.310853092" lastFinishedPulling="2025-07-14 23:33:15.574449354 +0000 UTC m=+67.456380143" observedRunningTime="2025-07-14 23:33:23.85748262 +0000 UTC m=+75.739413424" watchObservedRunningTime="2025-07-14 23:33:24.022487989 +0000 UTC m=+75.904418785" Jul 14 23:33:24.984000 audit[4882]: NETFILTER_CFG table=filter:129 family=2 entries=8 op=nft_register_rule pid=4882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:25.039762 kernel: kauditd_printk_skb: 42 callbacks suppressed Jul 14 23:33:25.080816 kernel: audit: type=1325 audit(1752536004.984:1468): table=filter:129 family=2 entries=8 op=nft_register_rule pid=4882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:25.082097 kernel: audit: type=1300 audit(1752536004.984:1468): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffee0980310 a2=0 a3=7ffee09802fc items=0 ppid=2203 pid=4882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:25.082178 kernel: audit: type=1327 audit(1752536004.984:1468): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:25.085036 kernel: audit: type=1325 audit(1752536004.996:1469): table=nat:130 family=2 entries=38 op=nft_register_chain pid=4882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:25.085066 kernel: audit: type=1300 audit(1752536004.996:1469): arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffee0980310 a2=0 a3=7ffee09802fc items=0 ppid=2203 pid=4882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:25.085082 kernel: audit: type=1327 audit(1752536004.996:1469): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:24.984000 audit[4882]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffee0980310 a2=0 a3=7ffee09802fc items=0 ppid=2203 pid=4882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:24.984000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:24.996000 audit[4882]: NETFILTER_CFG table=nat:130 family=2 entries=38 op=nft_register_chain pid=4882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:33:24.996000 audit[4882]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffee0980310 a2=0 a3=7ffee09802fc items=0 ppid=2203 pid=4882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:24.996000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:33:25.835371 env[1252]: 2025-07-14 23:33:25.080 [WARNING][4875] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--qchs2-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"64b95d63-e1e4-45ae-87ec-9b99781588aa", ResourceVersion:"990", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630", Pod:"goldmane-768f4c5c69-qchs2", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali957370df80c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:33:25.835371 env[1252]: 2025-07-14 23:33:25.104 [INFO][4875] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:33:25.835371 env[1252]: 2025-07-14 23:33:25.104 [INFO][4875] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" iface="eth0" netns="" Jul 14 23:33:25.835371 env[1252]: 2025-07-14 23:33:25.107 [INFO][4875] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:33:25.835371 env[1252]: 2025-07-14 23:33:25.107 [INFO][4875] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:33:25.835371 env[1252]: 2025-07-14 23:33:25.780 [INFO][4884] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" HandleID="k8s-pod-network.a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Workload="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:33:25.835371 env[1252]: 2025-07-14 23:33:25.785 [INFO][4884] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:33:25.835371 env[1252]: 2025-07-14 23:33:25.789 [INFO][4884] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:33:25.835371 env[1252]: 2025-07-14 23:33:25.822 [WARNING][4884] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" HandleID="k8s-pod-network.a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Workload="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:33:25.835371 env[1252]: 2025-07-14 23:33:25.822 [INFO][4884] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" HandleID="k8s-pod-network.a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Workload="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:33:25.835371 env[1252]: 2025-07-14 23:33:25.823 [INFO][4884] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:33:25.835371 env[1252]: 2025-07-14 23:33:25.828 [INFO][4875] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:33:25.835371 env[1252]: time="2025-07-14T23:33:25.835264468Z" level=info msg="TearDown network for sandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\" successfully" Jul 14 23:33:25.835371 env[1252]: time="2025-07-14T23:33:25.835289598Z" level=info msg="StopPodSandbox for \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\" returns successfully" Jul 14 23:33:25.964695 env[1252]: time="2025-07-14T23:33:25.964659122Z" level=info msg="RemovePodSandbox for \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\"" Jul 14 23:33:25.964865 env[1252]: time="2025-07-14T23:33:25.964694043Z" level=info msg="Forcibly stopping sandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\"" Jul 14 23:33:27.411777 env[1252]: 2025-07-14 23:33:26.604 [WARNING][4900] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--qchs2-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"64b95d63-e1e4-45ae-87ec-9b99781588aa", ResourceVersion:"990", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"092275f3714bbac0cc369ecb678bf3fa27f00e94aee0826c7d6408adc3a1b630", Pod:"goldmane-768f4c5c69-qchs2", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali957370df80c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:33:27.411777 env[1252]: 2025-07-14 23:33:26.606 [INFO][4900] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:33:27.411777 env[1252]: 2025-07-14 23:33:26.606 [INFO][4900] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" iface="eth0" netns="" Jul 14 23:33:27.411777 env[1252]: 2025-07-14 23:33:26.606 [INFO][4900] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:33:27.411777 env[1252]: 2025-07-14 23:33:26.606 [INFO][4900] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:33:27.411777 env[1252]: 2025-07-14 23:33:27.220 [INFO][4907] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" HandleID="k8s-pod-network.a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Workload="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:33:27.411777 env[1252]: 2025-07-14 23:33:27.233 [INFO][4907] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:33:27.411777 env[1252]: 2025-07-14 23:33:27.234 [INFO][4907] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:33:27.411777 env[1252]: 2025-07-14 23:33:27.340 [WARNING][4907] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" HandleID="k8s-pod-network.a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Workload="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:33:27.411777 env[1252]: 2025-07-14 23:33:27.340 [INFO][4907] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" HandleID="k8s-pod-network.a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Workload="localhost-k8s-goldmane--768f4c5c69--qchs2-eth0" Jul 14 23:33:27.411777 env[1252]: 2025-07-14 23:33:27.341 [INFO][4907] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:33:27.411777 env[1252]: 2025-07-14 23:33:27.357 [INFO][4900] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad" Jul 14 23:33:27.524742 env[1252]: time="2025-07-14T23:33:27.411799907Z" level=info msg="TearDown network for sandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\" successfully" Jul 14 23:33:27.524742 env[1252]: time="2025-07-14T23:33:27.439104596Z" level=info msg="RemovePodSandbox \"a3ccd312753f5d9a10a896ef788ef27e6117da31b15280b42551a0bb68fa4dad\" returns successfully" Jul 14 23:33:27.527592 env[1252]: time="2025-07-14T23:33:27.527566224Z" level=info msg="StopPodSandbox for \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\"" Jul 14 23:33:32.866707 systemd[1]: Started sshd@9-139.178.70.110:22-139.178.89.65:51180.service. Jul 14 23:33:33.043755 kernel: audit: type=1130 audit(1752536012.874:1470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.110:22-139.178.89.65:51180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:33:32.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.110:22-139.178.89.65:51180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:33:33.076439 env[1252]: 2025-07-14 23:33:30.111 [WARNING][4921] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--d6spx-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"68f555d2-1b6e-42a2-b3e2-e56e6ab77430", ResourceVersion:"936", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178", Pod:"coredns-668d6bf9bc-d6spx", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calica8704c0f8f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:33:33.076439 env[1252]: 2025-07-14 23:33:30.141 [INFO][4921] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:33:33.076439 env[1252]: 2025-07-14 23:33:30.142 [INFO][4921] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" iface="eth0" netns="" Jul 14 23:33:33.076439 env[1252]: 2025-07-14 23:33:30.143 [INFO][4921] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:33:33.076439 env[1252]: 2025-07-14 23:33:30.143 [INFO][4921] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:33:33.076439 env[1252]: 2025-07-14 23:33:31.389 [INFO][4934] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" HandleID="k8s-pod-network.7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Workload="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:33:33.076439 env[1252]: 2025-07-14 23:33:31.420 [INFO][4934] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:33:33.076439 env[1252]: 2025-07-14 23:33:31.425 [INFO][4934] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:33:33.076439 env[1252]: 2025-07-14 23:33:32.085 [WARNING][4934] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" HandleID="k8s-pod-network.7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Workload="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:33:33.076439 env[1252]: 2025-07-14 23:33:32.133 [INFO][4934] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" HandleID="k8s-pod-network.7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Workload="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:33:33.076439 env[1252]: 2025-07-14 23:33:32.691 [INFO][4934] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:33:33.076439 env[1252]: 2025-07-14 23:33:32.849 [INFO][4921] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:33:33.076439 env[1252]: time="2025-07-14T23:33:32.956094830Z" level=info msg="TearDown network for sandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\" successfully" Jul 14 23:33:33.076439 env[1252]: time="2025-07-14T23:33:32.956117743Z" level=info msg="StopPodSandbox for \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\" returns successfully" Jul 14 23:33:33.483000 audit[4944]: USER_ACCT pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:33:33.530147 kernel: audit: type=1101 audit(1752536013.483:1471): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:33:33.545540 kernel: audit: type=1103 audit(1752536013.512:1472): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:33:33.548660 kernel: audit: type=1006 audit(1752536013.512:1473): pid=4944 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 14 23:33:33.552487 kernel: audit: type=1300 audit(1752536013.512:1473): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf470e5f0 a2=3 a3=0 items=0 ppid=1 pid=4944 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:33.554313 kernel: audit: type=1327 audit(1752536013.512:1473): proctitle=737368643A20636F7265205B707269765D Jul 14 23:33:33.512000 audit[4944]: CRED_ACQ pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:33:33.512000 audit[4944]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf470e5f0 a2=3 a3=0 items=0 ppid=1 pid=4944 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:33:33.512000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:33:33.691959 sshd[4944]: Accepted publickey for core from 139.178.89.65 port 51180 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:33:33.527991 sshd[4944]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:33:33.856601 systemd-logind[1237]: New session 10 of user core. Jul 14 23:33:33.861076 systemd[1]: Started session-10.scope. Jul 14 23:33:33.899512 kernel: audit: type=1105 audit(1752536013.879:1474): pid=4944 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:33:33.879000 audit[4944]: USER_START pid=4944 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:33:33.921378 kernel: audit: type=1103 audit(1752536013.916:1475): pid=4946 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:33:33.916000 audit[4946]: CRED_ACQ pid=4946 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:34:02.111000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:02.224559 kernel: audit: type=1400 audit(1752536042.111:1476): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:02.232339 kernel: audit: type=1400 audit(1752536042.111:1477): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:02.232390 kernel: audit: type=1300 audit(1752536042.111:1477): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0028d0060 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:34:02.232412 kernel: audit: type=1327 audit(1752536042.111:1477): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:34:02.232431 kernel: audit: type=1300 audit(1752536042.111:1476): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c003274000 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:34:02.234879 kernel: audit: type=1327 audit(1752536042.111:1476): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:34:02.111000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:02.111000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0028d0060 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:34:02.111000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:34:02.111000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c003274000 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:34:02.111000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:34:03.303000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:03.390440 kernel: audit: type=1400 audit(1752536043.303:1478): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:03.400223 kernel: audit: type=1300 audit(1752536043.303:1478): arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c013c37680 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:34:03.401386 kernel: audit: type=1327 audit(1752536043.303:1478): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:34:03.402588 kernel: audit: type=1400 audit(1752536043.378:1479): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:03.303000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c013c37680 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:34:03.303000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:34:03.378000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:03.378000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c0108210e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:34:03.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:34:03.417000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:03.417000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c00f23ab20 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:34:03.417000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:34:03.444000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:03.444000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c00f9304a0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:34:03.444000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:34:03.453000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:03.453000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c010821110 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:34:03.453000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:34:03.508000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:03.508000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c013c37770 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:34:03.508000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:34:06.154000 audit[4570]: AVC avc: denied { watch } for pid=4570 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.2686497968/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c108,c306 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c108,c306 tclass=file permissive=0 Jul 14 23:34:06.154000 audit[4570]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0034d4120 a2=fc6 a3=0 items=0 ppid=4336 pid=4570 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c108,c306 key=(null) Jul 14 23:34:06.154000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:34:07.878000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:07.999136 kernel: kauditd_printk_skb: 17 callbacks suppressed Jul 14 23:34:08.006749 kernel: audit: type=1400 audit(1752536047.878:1485): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:08.011695 kernel: audit: type=1400 audit(1752536047.879:1486): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:08.011730 kernel: audit: type=1300 audit(1752536047.879:1486): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0032a0ca0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:34:08.011753 kernel: audit: type=1327 audit(1752536047.879:1486): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:34:08.011769 kernel: audit: type=1300 audit(1752536047.878:1485): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0032745c0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:34:08.011789 kernel: audit: type=1327 audit(1752536047.878:1485): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:34:08.011808 kernel: audit: type=1400 audit(1752536047.893:1487): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:08.011825 kernel: audit: type=1300 audit(1752536047.893:1487): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0032a0cc0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:34:08.011862 kernel: audit: type=1327 audit(1752536047.893:1487): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:34:08.011881 kernel: audit: type=1400 audit(1752536047.945:1488): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:07.879000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:07.879000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0032a0ca0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:34:07.879000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:34:07.878000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0032745c0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:34:07.878000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:34:07.893000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:07.893000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0032a0cc0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:34:07.893000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:34:07.945000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:34:07.945000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0032748e0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:34:07.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:34:14.880396 sshd[4944]: pam_unix(sshd:session): session closed for user core Jul 14 23:34:14.962607 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 23:34:14.973037 kernel: audit: type=1106 audit(1752536054.931:1489): pid=4944 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:34:14.975262 kernel: audit: type=1104 audit(1752536054.934:1490): pid=4944 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:34:14.975298 kernel: audit: type=1130 audit(1752536054.940:1491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.110:22-139.178.89.65:33184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:34:14.975320 kernel: audit: type=1131 audit(1752536054.948:1492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.110:22-139.178.89.65:51180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:34:14.931000 audit[4944]: USER_END pid=4944 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:34:14.934000 audit[4944]: CRED_DISP pid=4944 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:34:14.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.110:22-139.178.89.65:33184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:34:14.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.110:22-139.178.89.65:51180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:34:14.941334 systemd[1]: Started sshd@10-139.178.70.110:22-139.178.89.65:33184.service. Jul 14 23:34:14.950035 systemd[1]: sshd@9-139.178.70.110:22-139.178.89.65:51180.service: Deactivated successfully. Jul 14 23:34:14.951408 systemd[1]: session-10.scope: Deactivated successfully. Jul 14 23:34:14.951512 systemd[1]: session-10.scope: Consumed 6.512s CPU time. Jul 14 23:34:14.951991 systemd-logind[1237]: Session 10 logged out. Waiting for processes to exit. Jul 14 23:34:14.952565 systemd-logind[1237]: Removed session 10. Jul 14 23:34:15.135000 audit[5036]: USER_ACCT pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:34:15.138207 sshd[5036]: Accepted publickey for core from 139.178.89.65 port 33184 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:34:15.139000 audit[5036]: CRED_ACQ pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:34:15.143880 kernel: audit: type=1101 audit(1752536055.135:1493): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:34:15.144080 kernel: audit: type=1103 audit(1752536055.139:1494): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:34:15.150054 kernel: audit: type=1006 audit(1752536055.139:1495): pid=5036 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 14 23:34:15.150095 kernel: audit: type=1300 audit(1752536055.139:1495): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff313550c0 a2=3 a3=0 items=0 ppid=1 pid=5036 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:34:15.139000 audit[5036]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff313550c0 a2=3 a3=0 items=0 ppid=1 pid=5036 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:34:15.163368 kernel: audit: type=1327 audit(1752536055.139:1495): proctitle=737368643A20636F7265205B707269765D Jul 14 23:34:15.139000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:34:15.150157 sshd[5036]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:34:15.181042 systemd[1]: Started session-11.scope. Jul 14 23:34:15.181339 systemd-logind[1237]: New session 11 of user core. Jul 14 23:34:15.185000 audit[5036]: USER_START pid=5036 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:34:15.191400 kernel: audit: type=1105 audit(1752536055.185:1496): pid=5036 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:34:15.190000 audit[5039]: CRED_ACQ pid=5039 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:34:17.597000 audit[4705]: AVC avc: denied { watch } for pid=4705 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.4050615971/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c106,c183 tclass=file permissive=0 Jul 14 23:34:17.597000 audit[4705]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001d11920 a2=fc6 a3=0 items=0 ppid=4285 pid=4705 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 key=(null) Jul 14 23:34:17.597000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:34:19.137000 audit[5048]: NETFILTER_CFG table=filter:131 family=2 entries=13 op=nft_register_rule pid=5048 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:34:19.137000 audit[5048]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffcc4419d0 a2=0 a3=7fffcc4419bc items=0 ppid=2203 pid=5048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:34:19.137000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:34:19.142000 audit[5048]: NETFILTER_CFG table=nat:132 family=2 entries=67 op=nft_unregister_chain pid=5048 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:34:19.142000 audit[5048]: SYSCALL arch=c000003e syscall=46 success=yes exit=6028 a0=3 a1=7fffcc4419d0 a2=0 a3=7fffcc4419bc items=0 ppid=2203 pid=5048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:34:19.142000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:34:19.225000 audit[5050]: NETFILTER_CFG table=filter:133 family=2 entries=20 op=nft_register_rule pid=5050 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:34:19.225000 audit[5050]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffb91400a0 a2=0 a3=7fffb914008c items=0 ppid=2203 pid=5050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:34:19.225000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:34:19.231000 audit[5050]: NETFILTER_CFG table=nat:134 family=2 entries=26 op=nft_unregister_chain pid=5050 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:34:19.231000 audit[5050]: SYSCALL arch=c000003e syscall=46 success=yes exit=3212 a0=3 a1=7fffb91400a0 a2=0 a3=7fffb914008c items=0 ppid=2203 pid=5050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:34:19.231000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:35:02.179648 sshd[5036]: pam_unix(sshd:session): session closed for user core Jul 14 23:35:02.286798 kernel: kauditd_printk_skb: 16 callbacks suppressed Jul 14 23:35:02.297186 kernel: audit: type=1400 audit(1752536102.204:1503): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:02.304674 kernel: audit: type=1300 audit(1752536102.204:1503): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001c819a0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:35:02.304739 kernel: audit: type=1327 audit(1752536102.204:1503): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:35:02.304761 kernel: audit: type=1400 audit(1752536102.204:1504): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:02.304780 kernel: audit: type=1300 audit(1752536102.204:1504): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0023571a0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:35:02.304805 kernel: audit: type=1327 audit(1752536102.204:1504): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:35:02.304823 kernel: audit: type=1106 audit(1752536102.239:1505): pid=5036 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:02.304840 kernel: audit: type=1104 audit(1752536102.240:1506): pid=5036 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:02.304855 kernel: audit: type=1130 audit(1752536102.246:1507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.110:22-139.178.89.65:42122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:02.304871 kernel: audit: type=1131 audit(1752536102.256:1508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.110:22-139.178.89.65:33184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:02.204000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:02.204000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001c819a0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:35:02.204000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:35:02.204000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:02.204000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0023571a0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:35:02.204000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:35:02.239000 audit[5036]: USER_END pid=5036 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:02.240000 audit[5036]: CRED_DISP pid=5036 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:02.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.110:22-139.178.89.65:42122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:02.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.110:22-139.178.89.65:33184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:02.247576 systemd[1]: Started sshd@11-139.178.70.110:22-139.178.89.65:42122.service. Jul 14 23:35:02.257668 systemd[1]: sshd@10-139.178.70.110:22-139.178.89.65:33184.service: Deactivated successfully. Jul 14 23:35:02.266704 systemd[1]: session-11.scope: Deactivated successfully. Jul 14 23:35:02.266815 systemd[1]: session-11.scope: Consumed 18.013s CPU time. Jul 14 23:35:02.268222 systemd-logind[1237]: Session 11 logged out. Waiting for processes to exit. Jul 14 23:35:02.269693 systemd-logind[1237]: Removed session 11. Jul 14 23:35:02.376000 audit[5079]: USER_ACCT pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:02.377000 audit[5079]: CRED_ACQ pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:02.377000 audit[5079]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe58331650 a2=3 a3=0 items=0 ppid=1 pid=5079 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:35:02.377000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:35:02.382385 sshd[5079]: Accepted publickey for core from 139.178.89.65 port 42122 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:35:02.382814 sshd[5079]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:35:02.428372 systemd[1]: Started session-12.scope. Jul 14 23:35:02.429286 systemd-logind[1237]: New session 12 of user core. Jul 14 23:35:02.433000 audit[5079]: USER_START pid=5079 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:02.435000 audit[5082]: CRED_ACQ pid=5082 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:03.455000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:03.455000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00ed9cd00 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:35:03.455000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:35:03.472000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:03.472000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=68 a1=c0041f6270 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:35:03.472000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:35:03.508000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:03.508000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=68 a1=c01156c030 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:35:03.508000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:35:03.511000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:03.511000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=68 a1=c01156c0f0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:35:03.511000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:35:03.555000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:03.555000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=68 a1=c01156c360 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:35:03.555000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:35:03.560000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:03.560000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=68 a1=c00a09be80 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:35:03.560000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:35:06.510000 audit[4570]: AVC avc: denied { watch } for pid=4570 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.2686497968/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c108,c306 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c108,c306 tclass=file permissive=0 Jul 14 23:35:06.510000 audit[4570]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001d2e620 a2=fc6 a3=0 items=0 ppid=4336 pid=4570 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c108,c306 key=(null) Jul 14 23:35:06.510000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:35:06.892633 update_engine[1241]: I0714 23:35:06.880298 1241 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Jul 14 23:35:06.892633 update_engine[1241]: I0714 23:35:06.883208 1241 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Jul 14 23:35:06.957101 update_engine[1241]: I0714 23:35:06.906507 1241 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Jul 14 23:35:06.957101 update_engine[1241]: I0714 23:35:06.917269 1241 omaha_request_params.cc:62] Current group set to lts Jul 14 23:35:06.957101 update_engine[1241]: I0714 23:35:06.955467 1241 update_attempter.cc:499] Already updated boot flags. Skipping. Jul 14 23:35:06.957101 update_engine[1241]: I0714 23:35:06.955482 1241 update_attempter.cc:643] Scheduling an action processor start. Jul 14 23:35:06.957101 update_engine[1241]: I0714 23:35:06.955497 1241 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 14 23:35:06.960916 update_engine[1241]: I0714 23:35:06.960901 1241 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Jul 14 23:35:06.963087 update_engine[1241]: I0714 23:35:06.963069 1241 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 14 23:35:06.963087 update_engine[1241]: I0714 23:35:06.963081 1241 omaha_request_action.cc:271] Request: Jul 14 23:35:06.963087 update_engine[1241]: Jul 14 23:35:06.963087 update_engine[1241]: Jul 14 23:35:06.963087 update_engine[1241]: Jul 14 23:35:06.963087 update_engine[1241]: Jul 14 23:35:06.963087 update_engine[1241]: Jul 14 23:35:06.963087 update_engine[1241]: Jul 14 23:35:06.963087 update_engine[1241]: Jul 14 23:35:06.963087 update_engine[1241]: Jul 14 23:35:06.963087 update_engine[1241]: I0714 23:35:06.963084 1241 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 14 23:35:07.027396 update_engine[1241]: I0714 23:35:07.027259 1241 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 14 23:35:07.029450 update_engine[1241]: E0714 23:35:07.029412 1241 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 14 23:35:07.029504 update_engine[1241]: I0714 23:35:07.029485 1241 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Jul 14 23:35:07.044196 locksmithd[1285]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Jul 14 23:35:07.953000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:08.062316 kernel: kauditd_printk_skb: 28 callbacks suppressed Jul 14 23:35:08.066807 kernel: audit: type=1400 audit(1752536107.953:1521): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:08.070499 kernel: audit: type=1400 audit(1752536107.958:1522): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:08.071144 kernel: audit: type=1300 audit(1752536107.958:1522): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0015cfd60 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:35:08.071176 kernel: audit: type=1327 audit(1752536107.958:1522): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:35:08.071219 kernel: audit: type=1300 audit(1752536107.953:1521): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0015cfd40 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:35:08.072689 kernel: audit: type=1327 audit(1752536107.953:1521): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:35:08.073349 kernel: audit: type=1400 audit(1752536107.968:1523): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:08.073382 kernel: audit: type=1300 audit(1752536107.968:1523): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002b3a0e0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:35:08.073402 kernel: audit: type=1327 audit(1752536107.968:1523): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:35:08.073421 kernel: audit: type=1400 audit(1752536108.048:1524): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:07.958000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:07.958000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0015cfd60 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:35:07.958000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:35:07.953000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0015cfd40 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:35:07.953000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:35:07.968000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:07.968000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002b3a0e0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:35:07.968000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:35:08.048000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:35:08.048000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0015cffa0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:35:08.048000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:35:08.193598 systemd[1]: Started sshd@12-139.178.70.110:22-222.172.32.246:4759.service. Jul 14 23:35:08.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.110:22-222.172.32.246:4759 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:10.549605 sshd[5090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.172.32.246 user=root Jul 14 23:35:10.550000 audit[5090]: USER_AUTH pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=222.172.32.246 addr=222.172.32.246 terminal=ssh res=failed' Jul 14 23:35:12.468221 sshd[5090]: Failed password for root from 222.172.32.246 port 4759 ssh2 Jul 14 23:35:14.096320 sshd[5090]: Received disconnect from 222.172.32.246 port 4759:11: Bye Bye [preauth] Jul 14 23:35:14.096320 sshd[5090]: Disconnected from authenticating user root 222.172.32.246 port 4759 [preauth] Jul 14 23:35:14.169277 systemd[1]: sshd@12-139.178.70.110:22-222.172.32.246:4759.service: Deactivated successfully. Jul 14 23:35:14.196037 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 14 23:35:14.199186 kernel: audit: type=1131 audit(1752536114.179:1527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.110:22-222.172.32.246:4759 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:14.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.110:22-222.172.32.246:4759 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:16.885567 update_engine[1241]: I0714 23:35:16.870780 1241 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 14 23:35:16.946744 update_engine[1241]: I0714 23:35:16.896934 1241 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 14 23:35:16.946744 update_engine[1241]: E0714 23:35:16.897656 1241 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 14 23:35:16.946744 update_engine[1241]: I0714 23:35:16.901099 1241 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Jul 14 23:35:17.617000 audit[4705]: AVC avc: denied { watch } for pid=4705 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.4050615971/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c106,c183 tclass=file permissive=0 Jul 14 23:35:17.691552 kernel: audit: type=1400 audit(1752536117.617:1528): avc: denied { watch } for pid=4705 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.4050615971/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c106,c183 tclass=file permissive=0 Jul 14 23:35:17.697487 kernel: audit: type=1300 audit(1752536117.617:1528): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001dc2000 a2=fc6 a3=0 items=0 ppid=4285 pid=4705 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 key=(null) Jul 14 23:35:17.698613 kernel: audit: type=1327 audit(1752536117.617:1528): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:35:17.617000 audit[4705]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001dc2000 a2=fc6 a3=0 items=0 ppid=4285 pid=4705 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 key=(null) Jul 14 23:35:17.617000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:35:19.545193 env[1252]: time="2025-07-14T23:35:19.545053719Z" level=info msg="RemovePodSandbox for \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\"" Jul 14 23:35:19.545193 env[1252]: time="2025-07-14T23:35:19.545087805Z" level=info msg="Forcibly stopping sandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\"" Jul 14 23:35:19.682573 kubelet[2107]: W0714 23:35:19.588440 2107 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@12-139.178.70.110:22-222.172.32.246:4759.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@12-139.178.70.110:22-222.172.32.246:4759.service: no such file or directory Jul 14 23:35:19.824698 systemd[1]: run-containerd-runc-k8s.io-8e9b886a2da0b8a318490f6b3f5c256202efbc8169667855ee465e8bfed1ed6f-runc.DfUZrR.mount: Deactivated successfully. Jul 14 23:35:27.000830 update_engine[1241]: I0714 23:35:26.924940 1241 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 14 23:35:27.124624 update_engine[1241]: I0714 23:35:27.041960 1241 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 14 23:35:27.124624 update_engine[1241]: E0714 23:35:27.045751 1241 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 14 23:35:27.124624 update_engine[1241]: I0714 23:35:27.050140 1241 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Jul 14 23:35:27.645177 env[1252]: 2025-07-14 23:35:25.142 [WARNING][5160] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--d6spx-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"68f555d2-1b6e-42a2-b3e2-e56e6ab77430", ResourceVersion:"1318", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 32, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dfbb27055310c64fd1b310890b66b710d86caa9bddfe20e2d95865648b46d178", Pod:"coredns-668d6bf9bc-d6spx", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calica8704c0f8f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:35:27.645177 env[1252]: 2025-07-14 23:35:25.206 [INFO][5160] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:35:27.645177 env[1252]: 2025-07-14 23:35:25.206 [INFO][5160] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" iface="eth0" netns="" Jul 14 23:35:27.645177 env[1252]: 2025-07-14 23:35:25.207 [INFO][5160] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:35:27.645177 env[1252]: 2025-07-14 23:35:25.208 [INFO][5160] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:35:27.645177 env[1252]: 2025-07-14 23:35:26.814 [INFO][5223] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" HandleID="k8s-pod-network.7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Workload="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:35:27.645177 env[1252]: 2025-07-14 23:35:26.875 [INFO][5223] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:35:27.645177 env[1252]: 2025-07-14 23:35:26.913 [INFO][5223] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:35:27.645177 env[1252]: 2025-07-14 23:35:27.553 [WARNING][5223] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" HandleID="k8s-pod-network.7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Workload="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:35:27.645177 env[1252]: 2025-07-14 23:35:27.573 [INFO][5223] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" HandleID="k8s-pod-network.7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Workload="localhost-k8s-coredns--668d6bf9bc--d6spx-eth0" Jul 14 23:35:27.645177 env[1252]: 2025-07-14 23:35:27.587 [INFO][5223] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:35:27.645177 env[1252]: 2025-07-14 23:35:27.619 [INFO][5160] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de" Jul 14 23:35:27.849130 env[1252]: time="2025-07-14T23:35:27.653295823Z" level=info msg="TearDown network for sandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\" successfully" Jul 14 23:35:27.849130 env[1252]: time="2025-07-14T23:35:27.790309235Z" level=info msg="RemovePodSandbox \"7a3c214429ea64509a0f147eb1b4a91afd9b65d940117e98aaab625cbb2f08de\" returns successfully" Jul 14 23:35:36.914443 update_engine[1241]: I0714 23:35:36.894729 1241 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 14 23:35:37.104493 update_engine[1241]: I0714 23:35:36.937093 1241 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 14 23:35:37.104493 update_engine[1241]: E0714 23:35:36.938377 1241 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 14 23:35:37.104493 update_engine[1241]: I0714 23:35:36.938441 1241 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Jul 14 23:35:37.104493 update_engine[1241]: I0714 23:35:36.938447 1241 omaha_request_action.cc:621] Omaha request response: Jul 14 23:35:37.104493 update_engine[1241]: E0714 23:35:36.940675 1241 omaha_request_action.cc:640] Omaha request network transfer failed. Jul 14 23:35:37.104493 update_engine[1241]: I0714 23:35:36.941013 1241 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Jul 14 23:35:37.104493 update_engine[1241]: I0714 23:35:36.941022 1241 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 14 23:35:37.104493 update_engine[1241]: I0714 23:35:36.941025 1241 update_attempter.cc:306] Processing Done. Jul 14 23:35:37.104493 update_engine[1241]: E0714 23:35:36.942469 1241 update_attempter.cc:619] Update failed. Jul 14 23:35:37.104493 update_engine[1241]: I0714 23:35:36.942476 1241 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Jul 14 23:35:37.104493 update_engine[1241]: I0714 23:35:36.942481 1241 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Jul 14 23:35:37.104493 update_engine[1241]: I0714 23:35:36.942490 1241 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Jul 14 23:35:37.104493 update_engine[1241]: I0714 23:35:36.963907 1241 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 14 23:35:37.104493 update_engine[1241]: I0714 23:35:36.967957 1241 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 14 23:35:37.104493 update_engine[1241]: I0714 23:35:36.967970 1241 omaha_request_action.cc:271] Request: Jul 14 23:35:37.104493 update_engine[1241]: Jul 14 23:35:37.104493 update_engine[1241]: Jul 14 23:35:37.163391 update_engine[1241]: Jul 14 23:35:37.163391 update_engine[1241]: Jul 14 23:35:37.163391 update_engine[1241]: Jul 14 23:35:37.163391 update_engine[1241]: Jul 14 23:35:37.163391 update_engine[1241]: I0714 23:35:36.967978 1241 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 14 23:35:37.163391 update_engine[1241]: I0714 23:35:36.968142 1241 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 14 23:35:37.163391 update_engine[1241]: E0714 23:35:36.968211 1241 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 14 23:35:37.163391 update_engine[1241]: I0714 23:35:36.968267 1241 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Jul 14 23:35:37.163391 update_engine[1241]: I0714 23:35:36.968273 1241 omaha_request_action.cc:621] Omaha request response: Jul 14 23:35:37.163391 update_engine[1241]: I0714 23:35:36.968276 1241 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 14 23:35:37.163391 update_engine[1241]: I0714 23:35:36.968279 1241 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 14 23:35:37.163391 update_engine[1241]: I0714 23:35:36.968286 1241 update_attempter.cc:306] Processing Done. Jul 14 23:35:37.163391 update_engine[1241]: I0714 23:35:36.968290 1241 update_attempter.cc:310] Error event sent. Jul 14 23:35:37.163391 update_engine[1241]: I0714 23:35:36.970191 1241 update_check_scheduler.cc:74] Next update check in 43m45s Jul 14 23:35:37.254524 locksmithd[1285]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Jul 14 23:35:37.270516 locksmithd[1285]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Jul 14 23:35:55.656435 sshd[5079]: pam_unix(sshd:session): session closed for user core Jul 14 23:35:55.729157 kernel: audit: type=1106 audit(1752536155.695:1529): pid=5079 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:55.734051 kernel: audit: type=1104 audit(1752536155.702:1530): pid=5079 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:55.736642 kernel: audit: type=1130 audit(1752536155.715:1531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.110:22-139.178.89.65:47770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:55.737828 kernel: audit: type=1131 audit(1752536155.715:1532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.110:22-139.178.89.65:42122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:55.695000 audit[5079]: USER_END pid=5079 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:55.702000 audit[5079]: CRED_DISP pid=5079 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:55.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.110:22-139.178.89.65:47770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:55.715000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.110:22-139.178.89.65:42122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:55.716335 systemd[1]: Started sshd@13-139.178.70.110:22-139.178.89.65:47770.service. Jul 14 23:35:55.716838 systemd[1]: sshd@11-139.178.70.110:22-139.178.89.65:42122.service: Deactivated successfully. Jul 14 23:35:55.721264 systemd[1]: session-12.scope: Deactivated successfully. Jul 14 23:35:55.721378 systemd[1]: session-12.scope: Consumed 11.001s CPU time. Jul 14 23:35:55.721775 systemd-logind[1237]: Session 12 logged out. Waiting for processes to exit. Jul 14 23:35:55.725393 systemd-logind[1237]: Removed session 12. Jul 14 23:35:55.837000 audit[5255]: USER_ACCT pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:55.840095 sshd[5255]: Accepted publickey for core from 139.178.89.65 port 47770 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:35:55.842369 kernel: audit: type=1101 audit(1752536155.837:1533): pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:55.841000 audit[5255]: CRED_ACQ pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:55.844574 sshd[5255]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:35:55.849201 kernel: audit: type=1103 audit(1752536155.841:1534): pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:55.849260 kernel: audit: type=1006 audit(1752536155.841:1535): pid=5255 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 14 23:35:55.849286 kernel: audit: type=1300 audit(1752536155.841:1535): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdfe4b1e70 a2=3 a3=0 items=0 ppid=1 pid=5255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:35:55.841000 audit[5255]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdfe4b1e70 a2=3 a3=0 items=0 ppid=1 pid=5255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:35:55.869942 kernel: audit: type=1327 audit(1752536155.841:1535): proctitle=737368643A20636F7265205B707269765D Jul 14 23:35:55.841000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:35:55.870098 kubelet[2107]: E0714 23:35:36.699880 2107 controller.go:195] "Failed to update lease" err="Put \"https://139.178.70.110:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Jul 14 23:35:55.908015 systemd-logind[1237]: New session 13 of user core. Jul 14 23:35:55.908691 systemd[1]: Started session-13.scope. Jul 14 23:35:55.915000 audit[5255]: USER_START pid=5255 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:55.920488 kernel: audit: type=1105 audit(1752536155.915:1536): pid=5255 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:55.919000 audit[5264]: CRED_ACQ pid=5264 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:58.817615 sshd[5255]: pam_unix(sshd:session): session closed for user core Jul 14 23:35:58.886000 audit[5255]: USER_END pid=5255 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:58.888000 audit[5255]: CRED_DISP pid=5255 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:58.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.110:22-139.178.89.65:47776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:58.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.110:22-139.178.89.65:47770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:35:58.899286 systemd[1]: Started sshd@14-139.178.70.110:22-139.178.89.65:47776.service. Jul 14 23:35:58.910009 systemd[1]: sshd@13-139.178.70.110:22-139.178.89.65:47770.service: Deactivated successfully. Jul 14 23:35:58.910574 systemd[1]: session-13.scope: Deactivated successfully. Jul 14 23:35:58.914732 systemd-logind[1237]: Session 13 logged out. Waiting for processes to exit. Jul 14 23:35:58.915700 systemd-logind[1237]: Removed session 13. Jul 14 23:35:59.135000 audit[5272]: USER_ACCT pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:59.137000 audit[5272]: CRED_ACQ pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:59.137000 audit[5272]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff571aa260 a2=3 a3=0 items=0 ppid=1 pid=5272 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:35:59.137000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:35:59.269658 sshd[5272]: Accepted publickey for core from 139.178.89.65 port 47776 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:35:59.168983 sshd[5272]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:35:59.537126 systemd-logind[1237]: New session 14 of user core. Jul 14 23:35:59.540000 audit[5272]: USER_START pid=5272 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:59.542000 audit[5275]: CRED_ACQ pid=5275 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:35:59.537771 systemd[1]: Started session-14.scope. Jul 14 23:36:02.305584 kernel: kauditd_printk_skb: 12 callbacks suppressed Jul 14 23:36:02.390954 kernel: audit: type=1400 audit(1752536162.277:1548): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:02.398272 kernel: audit: type=1400 audit(1752536162.277:1547): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:02.398335 kernel: audit: type=1300 audit(1752536162.277:1548): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c003137e00 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:36:02.400291 kernel: audit: type=1327 audit(1752536162.277:1548): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:36:02.401376 kernel: audit: type=1300 audit(1752536162.277:1547): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0030ff300 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:36:02.403061 kernel: audit: type=1327 audit(1752536162.277:1547): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:36:02.277000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:02.277000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:02.277000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c003137e00 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:36:02.277000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:36:02.277000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0030ff300 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:36:02.277000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:36:03.482000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:03.563935 kernel: audit: type=1400 audit(1752536163.482:1549): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:03.570693 kernel: audit: type=1300 audit(1752536163.482:1549): arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00e56bf50 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:36:03.570747 kernel: audit: type=1327 audit(1752536163.482:1549): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:36:03.570799 kernel: audit: type=1400 audit(1752536163.503:1550): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:03.482000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00e56bf50 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:36:03.482000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:36:03.503000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:03.503000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c009536f20 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:36:03.503000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:36:03.519000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:03.519000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00e56bfb0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:36:03.519000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:36:03.524000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:03.524000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00b8ea1e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:36:03.524000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:36:03.559000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:03.559000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00b8ea390 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:36:03.559000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:36:03.560000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:03.560000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00a1f9a60 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:36:03.560000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:36:06.859000 audit[4570]: AVC avc: denied { watch } for pid=4570 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.2686497968/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c108,c306 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c108,c306 tclass=file permissive=0 Jul 14 23:36:06.859000 audit[4570]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001d2e0a0 a2=fc6 a3=0 items=0 ppid=4336 pid=4570 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c108,c306 key=(null) Jul 14 23:36:06.859000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:36:08.104000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:08.225593 kernel: kauditd_printk_skb: 17 callbacks suppressed Jul 14 23:36:08.243423 kernel: audit: type=1400 audit(1752536168.104:1556): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:08.251712 kernel: audit: type=1300 audit(1752536168.104:1556): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0030fe120 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:36:08.251790 kernel: audit: type=1327 audit(1752536168.104:1556): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:36:08.253848 kernel: audit: type=1400 audit(1752536168.104:1557): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:08.255943 kernel: audit: type=1300 audit(1752536168.104:1557): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002f84220 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:36:08.262783 kernel: audit: type=1327 audit(1752536168.104:1557): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:36:08.266517 kernel: audit: type=1400 audit(1752536168.117:1558): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:08.267602 kernel: audit: type=1300 audit(1752536168.117:1558): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0030fe140 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:36:08.267634 kernel: audit: type=1327 audit(1752536168.117:1558): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:36:08.267652 kernel: audit: type=1400 audit(1752536168.117:1559): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:08.104000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0030fe120 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:36:08.104000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:36:08.104000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:08.104000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002f84220 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:36:08.104000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:36:08.117000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:08.117000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0030fe140 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:36:08.117000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:36:08.117000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:36:08.117000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002f84240 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:36:08.117000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:36:18.062000 audit[4705]: AVC avc: denied { watch } for pid=4705 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.4050615971/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c106,c183 tclass=file permissive=0 Jul 14 23:36:18.231802 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 23:36:18.250309 kernel: audit: type=1400 audit(1752536178.062:1560): avc: denied { watch } for pid=4705 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.4050615971/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c106,c183 tclass=file permissive=0 Jul 14 23:36:18.254581 kernel: audit: type=1300 audit(1752536178.062:1560): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001dc2060 a2=fc6 a3=0 items=0 ppid=4285 pid=4705 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 key=(null) Jul 14 23:36:18.257326 kernel: audit: type=1327 audit(1752536178.062:1560): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:36:18.062000 audit[4705]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001dc2060 a2=fc6 a3=0 items=0 ppid=4285 pid=4705 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 key=(null) Jul 14 23:36:18.062000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:36:27.146000 audit[5318]: NETFILTER_CFG table=filter:135 family=2 entries=34 op=nft_register_rule pid=5318 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:36:27.283422 kernel: audit: type=1325 audit(1752536187.146:1561): table=filter:135 family=2 entries=34 op=nft_register_rule pid=5318 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:36:27.291329 kernel: audit: type=1300 audit(1752536187.146:1561): arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fffeff7f300 a2=0 a3=7fffeff7f2ec items=0 ppid=2203 pid=5318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:36:27.291401 kernel: audit: type=1327 audit(1752536187.146:1561): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:36:27.292688 kernel: audit: type=1325 audit(1752536187.159:1562): table=nat:136 family=2 entries=12 op=nft_register_rule pid=5318 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:36:27.294998 kernel: audit: type=1300 audit(1752536187.159:1562): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffeff7f300 a2=0 a3=0 items=0 ppid=2203 pid=5318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:36:27.295071 kernel: audit: type=1327 audit(1752536187.159:1562): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:36:27.146000 audit[5318]: SYSCALL arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fffeff7f300 a2=0 a3=7fffeff7f2ec items=0 ppid=2203 pid=5318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:36:27.146000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:36:27.159000 audit[5318]: NETFILTER_CFG table=nat:136 family=2 entries=12 op=nft_register_rule pid=5318 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:36:27.159000 audit[5318]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffeff7f300 a2=0 a3=0 items=0 ppid=2203 pid=5318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:36:27.159000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:36:28.539000 audit[5320]: NETFILTER_CFG table=filter:137 family=2 entries=46 op=nft_register_rule pid=5320 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:36:28.766766 kernel: audit: type=1325 audit(1752536188.539:1563): table=filter:137 family=2 entries=46 op=nft_register_rule pid=5320 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:36:28.796482 kernel: audit: type=1300 audit(1752536188.539:1563): arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fff8725ca30 a2=0 a3=7fff8725ca1c items=0 ppid=2203 pid=5320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:36:28.800325 kernel: audit: type=1327 audit(1752536188.539:1563): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:36:28.800369 kernel: audit: type=1325 audit(1752536188.561:1564): table=nat:138 family=2 entries=12 op=nft_register_rule pid=5320 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:36:28.539000 audit[5320]: SYSCALL arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fff8725ca30 a2=0 a3=7fff8725ca1c items=0 ppid=2203 pid=5320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:36:28.539000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:36:28.561000 audit[5320]: NETFILTER_CFG table=nat:138 family=2 entries=12 op=nft_register_rule pid=5320 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:36:28.561000 audit[5320]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff8725ca30 a2=0 a3=0 items=0 ppid=2203 pid=5320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:36:28.561000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:36:29.930554 sshd[5272]: pam_unix(sshd:session): session closed for user core Jul 14 23:36:30.002000 audit[5272]: USER_END pid=5272 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:36:30.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.110:22-139.178.89.65:39258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:36:30.005000 audit[5272]: CRED_DISP pid=5272 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:36:30.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.110:22-139.178.89.65:47776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:36:30.005501 systemd[1]: Started sshd@15-139.178.70.110:22-139.178.89.65:39258.service. Jul 14 23:36:30.017730 systemd[1]: sshd@14-139.178.70.110:22-139.178.89.65:47776.service: Deactivated successfully. Jul 14 23:36:30.019738 systemd[1]: session-14.scope: Deactivated successfully. Jul 14 23:36:30.022494 systemd-logind[1237]: Session 14 logged out. Waiting for processes to exit. Jul 14 23:36:30.024529 systemd-logind[1237]: Removed session 14. Jul 14 23:36:30.145000 audit[5322]: USER_ACCT pid=5322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:36:30.146000 audit[5322]: CRED_ACQ pid=5322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:36:30.146000 audit[5322]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcaee1280 a2=3 a3=0 items=0 ppid=1 pid=5322 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:36:30.146000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:36:30.178963 sshd[5322]: Accepted publickey for core from 139.178.89.65 port 39258 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:36:30.154812 sshd[5322]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:36:30.243910 systemd-logind[1237]: New session 15 of user core. Jul 14 23:36:30.244504 systemd[1]: Started session-15.scope. Jul 14 23:36:30.250000 audit[5322]: USER_START pid=5322 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:36:30.251000 audit[5325]: CRED_ACQ pid=5325 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:36:40.308375 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 14 23:36:40.407524 kernel: audit: type=1325 audit(1752536200.288:1574): table=filter:139 family=2 entries=34 op=nft_register_rule pid=5331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:36:40.411203 kernel: audit: type=1300 audit(1752536200.288:1574): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffd28cdefe0 a2=0 a3=7ffd28cdefcc items=0 ppid=2203 pid=5331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:36:40.411263 kernel: audit: type=1327 audit(1752536200.288:1574): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:36:40.413007 kernel: audit: type=1325 audit(1752536200.296:1575): table=nat:140 family=2 entries=96 op=nft_register_chain pid=5331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:36:40.414040 kernel: audit: type=1300 audit(1752536200.296:1575): arch=c000003e syscall=46 success=yes exit=45612 a0=3 a1=7ffd28cdefe0 a2=0 a3=7ffd28cdefcc items=0 ppid=2203 pid=5331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:36:40.416205 kernel: audit: type=1327 audit(1752536200.296:1575): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:36:40.288000 audit[5331]: NETFILTER_CFG table=filter:139 family=2 entries=34 op=nft_register_rule pid=5331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:36:40.288000 audit[5331]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffd28cdefe0 a2=0 a3=7ffd28cdefcc items=0 ppid=2203 pid=5331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:36:40.288000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:36:40.296000 audit[5331]: NETFILTER_CFG table=nat:140 family=2 entries=96 op=nft_register_chain pid=5331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:36:40.296000 audit[5331]: SYSCALL arch=c000003e syscall=46 success=yes exit=45612 a0=3 a1=7ffd28cdefe0 a2=0 a3=7ffd28cdefcc items=0 ppid=2203 pid=5331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:36:40.296000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:37:02.365000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:02.522747 kernel: audit: type=1400 audit(1752536222.365:1576): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:02.538619 kernel: audit: type=1300 audit(1752536222.365:1576): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001615ea0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:37:02.541290 kernel: audit: type=1327 audit(1752536222.365:1576): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:37:02.541340 kernel: audit: type=1400 audit(1752536222.386:1577): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:02.541373 kernel: audit: type=1300 audit(1752536222.386:1577): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002a35020 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:37:02.542885 kernel: audit: type=1327 audit(1752536222.386:1577): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:37:02.365000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001615ea0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:37:02.365000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:37:02.386000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:02.386000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002a35020 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:37:02.386000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:37:03.515000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:03.663433 kernel: audit: type=1400 audit(1752536223.515:1578): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:03.670190 kernel: audit: type=1300 audit(1752536223.515:1578): arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c013eb79e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:37:03.670253 kernel: audit: type=1327 audit(1752536223.515:1578): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:37:03.670271 kernel: audit: type=1400 audit(1752536223.528:1579): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:03.515000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c013eb79e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:37:03.515000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:37:03.528000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:03.528000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00857aea0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:37:03.528000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:37:03.568000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:03.568000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c009753d40 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:37:03.568000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:37:03.575000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:03.575000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00857aed0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:37:03.575000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:37:03.588000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:03.588000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00857af60 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:37:03.588000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:37:03.590000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:03.590000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00844d2f0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:37:03.590000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:37:07.281000 audit[4570]: AVC avc: denied { watch } for pid=4570 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.2686497968/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c108,c306 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c108,c306 tclass=file permissive=0 Jul 14 23:37:07.281000 audit[4570]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0034d4320 a2=fc6 a3=0 items=0 ppid=4336 pid=4570 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c108,c306 key=(null) Jul 14 23:37:07.281000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:37:08.306776 kernel: kauditd_printk_skb: 17 callbacks suppressed Jul 14 23:37:08.480923 kernel: audit: type=1400 audit(1752536228.302:1585): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:08.496721 kernel: audit: type=1400 audit(1752536228.303:1586): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:08.499066 kernel: audit: type=1300 audit(1752536228.303:1586): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002a18320 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:37:08.506280 kernel: audit: type=1327 audit(1752536228.303:1586): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:37:08.506318 kernel: audit: type=1300 audit(1752536228.302:1585): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002036ba0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:37:08.506340 kernel: audit: type=1327 audit(1752536228.302:1585): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:37:08.506374 kernel: audit: type=1400 audit(1752536228.324:1587): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:08.509377 kernel: audit: type=1300 audit(1752536228.324:1587): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002a18340 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:37:08.513951 kernel: audit: type=1327 audit(1752536228.324:1587): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:37:08.515982 kernel: audit: type=1400 audit(1752536228.414:1588): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:08.302000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:08.303000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:08.303000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002a18320 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:37:08.303000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:37:08.302000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002036ba0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:37:08.302000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:37:08.324000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:08.324000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002a18340 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:37:08.324000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:37:08.414000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:37:08.414000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002036fe0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:37:08.414000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:37:18.154063 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 23:37:18.217409 kernel: audit: type=1400 audit(1752536238.136:1589): avc: denied { watch } for pid=4705 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.4050615971/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c106,c183 tclass=file permissive=0 Jul 14 23:37:18.222072 kernel: audit: type=1300 audit(1752536238.136:1589): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001dc2040 a2=fc6 a3=0 items=0 ppid=4285 pid=4705 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 key=(null) Jul 14 23:37:18.222962 kernel: audit: type=1327 audit(1752536238.136:1589): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:37:18.136000 audit[4705]: AVC avc: denied { watch } for pid=4705 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.4050615971/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c106,c183 tclass=file permissive=0 Jul 14 23:37:18.136000 audit[4705]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001dc2040 a2=fc6 a3=0 items=0 ppid=4285 pid=4705 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c106,c183 key=(null) Jul 14 23:37:18.136000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:37:56.606078 sshd[5322]: pam_unix(sshd:session): session closed for user core Jul 14 23:37:56.708389 kernel: audit: type=1106 audit(1752536276.657:1590): pid=5322 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:37:56.716792 kernel: audit: type=1104 audit(1752536276.662:1591): pid=5322 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:37:56.719445 kernel: audit: type=1130 audit(1752536276.673:1592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.110:22-139.178.89.65:52310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:37:56.722460 kernel: audit: type=1131 audit(1752536276.684:1593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.110:22-139.178.89.65:39258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:37:56.657000 audit[5322]: USER_END pid=5322 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:37:56.662000 audit[5322]: CRED_DISP pid=5322 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:37:56.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.110:22-139.178.89.65:52310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:37:56.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.110:22-139.178.89.65:39258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:37:56.674084 systemd[1]: Started sshd@16-139.178.70.110:22-139.178.89.65:52310.service. Jul 14 23:37:56.682010 systemd[1]: sshd@15-139.178.70.110:22-139.178.89.65:39258.service: Deactivated successfully. Jul 14 23:37:56.691101 systemd[1]: session-15.scope: Deactivated successfully. Jul 14 23:37:56.691195 systemd[1]: session-15.scope: Consumed 8.984s CPU time. Jul 14 23:37:56.691685 systemd-logind[1237]: Session 15 logged out. Waiting for processes to exit. Jul 14 23:37:56.692270 systemd-logind[1237]: Removed session 15. Jul 14 23:37:56.799900 sshd[5367]: Accepted publickey for core from 139.178.89.65 port 52310 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:37:56.799000 audit[5367]: USER_ACCT pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:37:56.806850 kernel: audit: type=1101 audit(1752536276.799:1594): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:37:56.806895 kernel: audit: type=1103 audit(1752536276.803:1595): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:37:56.803000 audit[5367]: CRED_ACQ pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:37:56.809171 kernel: audit: type=1006 audit(1752536276.803:1596): pid=5367 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 14 23:37:56.812497 kernel: audit: type=1300 audit(1752536276.803:1596): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbb2bd000 a2=3 a3=0 items=0 ppid=1 pid=5367 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:37:56.803000 audit[5367]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbb2bd000 a2=3 a3=0 items=0 ppid=1 pid=5367 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:37:56.832848 kernel: audit: type=1327 audit(1752536276.803:1596): proctitle=737368643A20636F7265205B707269765D Jul 14 23:37:56.803000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:37:56.813988 sshd[5367]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:37:56.889413 systemd[1]: Started session-16.scope. Jul 14 23:37:56.889523 systemd-logind[1237]: New session 16 of user core. Jul 14 23:37:56.900381 kernel: audit: type=1105 audit(1752536276.896:1597): pid=5367 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:37:56.896000 audit[5367]: USER_START pid=5367 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:37:56.900000 audit[5371]: CRED_ACQ pid=5371 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:37:59.159957 kubelet[2107]: E0714 23:37:21.603932 2107 log.go:32] "Status from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 14 23:38:02.461072 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 23:38:02.519807 kernel: audit: type=1400 audit(1752536282.447:1599): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:02.523971 kernel: audit: type=1300 audit(1752536282.447:1599): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0007c15e0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:38:02.526394 kernel: audit: type=1327 audit(1752536282.447:1599): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:38:02.527740 kernel: audit: type=1400 audit(1752536282.462:1600): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:02.528811 kernel: audit: type=1300 audit(1752536282.462:1600): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000be9a70 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:38:02.528836 kernel: audit: type=1327 audit(1752536282.462:1600): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:38:02.447000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:02.447000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0007c15e0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:38:02.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:38:02.462000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:02.462000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000be9a70 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:38:02.462000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:38:03.608000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:03.679499 kernel: audit: type=1400 audit(1752536283.608:1601): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:03.689374 kernel: audit: type=1300 audit(1752536283.608:1601): arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c0095ae200 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:38:03.691428 kernel: audit: type=1327 audit(1752536283.608:1601): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:38:03.691456 kernel: audit: type=1400 audit(1752536283.621:1602): avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:03.608000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c0095ae200 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:38:03.608000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:38:03.621000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:03.621000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c013d910e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:38:03.621000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:38:03.632000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:03.632000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:03.632000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c013d91140 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:38:03.632000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c013fa1290 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:38:03.632000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:38:03.632000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:38:03.632000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:03.632000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c0095ae220 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:38:03.632000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:38:03.647000 audit[1975]: AVC avc: denied { watch } for pid=1975 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:03.647000 audit[1975]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c013d911a0 a2=fc6 a3=0 items=0 ppid=1834 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c681 key=(null) Jul 14 23:38:03.647000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:38:05.804277 kubelet[2107]: W0714 23:37:00.444910 2107 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@14-139.178.70.110:22-139.178.89.65:47776.service": 0x40000100 == IN_CREATE|IN_ISDIR): readdirent /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@14-139.178.70.110:22-139.178.89.65:47776.service: no such file or directory Jul 14 23:38:07.392000 audit[4570]: AVC avc: denied { watch } for pid=4570 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_32_38.2686497968/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c108,c306 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c108,c306 tclass=file permissive=0 Jul 14 23:38:07.392000 audit[4570]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0034d4380 a2=fc6 a3=0 items=0 ppid=4336 pid=4570 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c108,c306 key=(null) Jul 14 23:38:07.392000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:38:08.466000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:08.554896 kernel: kauditd_printk_skb: 17 callbacks suppressed Jul 14 23:38:08.563446 kernel: audit: type=1400 audit(1752536288.466:1608): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:08.565241 kernel: audit: type=1300 audit(1752536288.466:1608): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0007c16a0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:38:08.567296 kernel: audit: type=1327 audit(1752536288.466:1608): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:38:08.568810 kernel: audit: type=1400 audit(1752536288.516:1609): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:08.571722 kernel: audit: type=1300 audit(1752536288.516:1609): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a75280 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:38:08.571755 kernel: audit: type=1327 audit(1752536288.516:1609): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:38:08.572658 kernel: audit: type=1400 audit(1752536288.523:1610): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:08.572685 kernel: audit: type=1300 audit(1752536288.523:1610): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a752e0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:38:08.573675 kernel: audit: type=1327 audit(1752536288.523:1610): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:38:08.574739 kernel: audit: type=1400 audit(1752536288.523:1611): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:08.466000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0007c16a0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:38:08.466000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:38:08.516000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:08.516000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a75280 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:38:08.516000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:38:08.523000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:08.523000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a752e0 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:38:08.523000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:38:08.523000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:38:08.523000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a75300 a2=fc6 a3=0 items=0 ppid=1789 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c248,c713 key=(null) Jul 14 23:38:08.523000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:38:13.619441 sshd[5367]: pam_unix(sshd:session): session closed for user core Jul 14 23:38:13.709875 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 23:38:13.715948 kernel: audit: type=1106 audit(1752536293.657:1612): pid=5367 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:38:13.719028 kernel: audit: type=1104 audit(1752536293.662:1613): pid=5367 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:38:13.719062 kernel: audit: type=1131 audit(1752536293.684:1614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.110:22-139.178.89.65:52310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:38:13.657000 audit[5367]: USER_END pid=5367 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:38:13.662000 audit[5367]: CRED_DISP pid=5367 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:38:13.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.110:22-139.178.89.65:52310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:38:13.679427 systemd[1]: sshd@16-139.178.70.110:22-139.178.89.65:52310.service: Deactivated successfully. Jul 14 23:38:13.685320 systemd[1]: session-16.scope: Deactivated successfully. Jul 14 23:38:13.685419 systemd[1]: session-16.scope: Consumed 4.018s CPU time. Jul 14 23:38:13.689931 systemd-logind[1237]: Session 16 logged out. Waiting for processes to exit. Jul 14 23:38:13.700761 systemd-logind[1237]: Removed session 16. Jul 14 23:38:14.297114 kubelet[2107]: E0714 23:38:14.285134 2107 log.go:32] "ListContainers with filter from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" filter="&ContainerFilter{Id:,State:nil,PodSandboxId:,LabelSelector:map[string]string{},}" Jul 14 23:38:14.335275 kubelet[2107]: E0714 23:38:14.333274 2107 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="8e9b886a2da0b8a318490f6b3f5c256202efbc8169667855ee465e8bfed1ed6f" cmd=["/health","-live"] Jul 14 23:38:14.499595 kubelet[2107]: E0714 23:38:14.499564 2107 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="221e1eaa2aa61ff7c154362d4ac41d6179bd218207cb4fef15114891d200eecc" Jul 14 23:38:14.538049 kubelet[2107]: E0714 23:38:13.830253 2107 kubelet.go:2987] "Container runtime sanity check failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 14 23:38:14.545784 kubelet[2107]: W0714 23:38:13.870963 2107 reflector.go:492] object-"kube-system"/"kube-proxy": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 14 23:38:14.546510 kubelet[2107]: W0714 23:38:13.940636 2107 reflector.go:492] object-"calico-apiserver"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 14 23:38:14.629446 kubelet[2107]: E0714 23:38:14.629367 2107 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="f74488d454d7f06826dbb9a02f004fb3c5af2fd27cfb939889f2f423fd102398" cmd=["/usr/bin/check-status","-r"] Jul 14 23:38:14.635027 env[1252]: time="2025-07-14T23:38:14.634993059Z" level=info msg="StopPodSandbox for \"8e6f8837e5749004318c0210ba3a1739f01689f98cda6ad2addedb9bb3584522\"" Jul 14 23:38:14.641139 kubelet[2107]: W0714 23:38:14.640628 2107 reflector.go:492] k8s.io/client-go/informers/factory.go:160: watch of *v1.CSIDriver ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 14 23:38:14.660958 kubelet[2107]: W0714 23:38:14.043517 2107 reflector.go:492] k8s.io/client-go/informers/factory.go:160: watch of *v1.Node ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 14 23:38:14.660958 kubelet[2107]: W0714 23:38:14.081901 2107 reflector.go:492] object-"tigera-operator"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 14 23:38:14.660958 kubelet[2107]: W0714 23:38:14.102564 2107 reflector.go:492] object-"tigera-operator"/"kubernetes-services-endpoint": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 14 23:38:14.660958 kubelet[2107]: W0714 23:38:14.122519 2107 reflector.go:492] object-"calico-system"/"node-certs": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 14 23:38:14.660958 kubelet[2107]: W0714 23:38:14.140232 2107 reflector.go:492] object-"calico-apiserver"/"calico-apiserver-certs": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 14 23:38:14.660958 kubelet[2107]: W0714 23:38:13.137497 2107 reflector.go:492] object-"calico-system"/"goldmane-ca-bundle": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 14 23:38:14.660958 kubelet[2107]: W0714 23:38:10.233033 2107 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-14.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-14.scope: no such file or directory Jul 14 23:38:14.664013 kubelet[2107]: W0714 23:38:14.652400 2107 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@15-139.178.70.110:22-139.178.89.65:39258.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@15-139.178.70.110:22-139.178.89.65:39258.service: no such file or directory Jul 14 23:38:14.664013 kubelet[2107]: W0714 23:38:14.652428 2107 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-15.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-15.scope: no such file or directory Jul 14 23:38:14.664013 kubelet[2107]: W0714 23:38:14.652436 2107 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@16-139.178.70.110:22-139.178.89.65:52310.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@16-139.178.70.110:22-139.178.89.65:52310.service: no such file or directory Jul 14 23:38:14.664013 kubelet[2107]: W0714 23:38:14.652448 2107 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-16.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-16.scope: no such file or directory Jul 14 23:38:14.682384 kubelet[2107]: W0714 23:38:14.517042 2107 reflector.go:492] object-"calico-system"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 14 23:38:14.682384 kubelet[2107]: W0714 23:38:14.536054 2107 reflector.go:492] object-"calico-system"/"tigera-ca-bundle": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 14 23:38:14.986835 kubelet[2107]: E0714 23:38:14.285153 2107 log.go:32] "ListPodSandbox with filter from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" filter="&PodSandboxFilter{Id:,State:nil,LabelSelector:map[string]string{},}"