Jul 14 23:09:19.670976 kernel: Linux version 5.15.187-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Jul 14 20:42:36 -00 2025 Jul 14 23:09:19.670990 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=d9618a329f89744ce954b0fa1b02ce8164745af7389f9de9c3421ad2087e0dba Jul 14 23:09:19.670997 kernel: Disabled fast string operations Jul 14 23:09:19.671001 kernel: BIOS-provided physical RAM map: Jul 14 23:09:19.671004 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ebff] usable Jul 14 23:09:19.671008 kernel: BIOS-e820: [mem 0x000000000009ec00-0x000000000009ffff] reserved Jul 14 23:09:19.671014 kernel: BIOS-e820: [mem 0x00000000000dc000-0x00000000000fffff] reserved Jul 14 23:09:19.671018 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007fedffff] usable Jul 14 23:09:19.671022 kernel: BIOS-e820: [mem 0x000000007fee0000-0x000000007fefefff] ACPI data Jul 14 23:09:19.671026 kernel: BIOS-e820: [mem 0x000000007feff000-0x000000007fefffff] ACPI NVS Jul 14 23:09:19.671030 kernel: BIOS-e820: [mem 0x000000007ff00000-0x000000007fffffff] usable Jul 14 23:09:19.671034 kernel: BIOS-e820: [mem 0x00000000f0000000-0x00000000f7ffffff] reserved Jul 14 23:09:19.671038 kernel: BIOS-e820: [mem 0x00000000fec00000-0x00000000fec0ffff] reserved Jul 14 23:09:19.671042 kernel: BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved Jul 14 23:09:19.671048 kernel: BIOS-e820: [mem 0x00000000fffe0000-0x00000000ffffffff] reserved Jul 14 23:09:19.671053 kernel: NX (Execute Disable) protection: active Jul 14 23:09:19.671057 kernel: SMBIOS 2.7 present. Jul 14 23:09:19.671062 kernel: DMI: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020 Jul 14 23:09:19.671066 kernel: vmware: hypercall mode: 0x00 Jul 14 23:09:19.671070 kernel: Hypervisor detected: VMware Jul 14 23:09:19.671089 kernel: vmware: TSC freq read from hypervisor : 3408.000 MHz Jul 14 23:09:19.671094 kernel: vmware: Host bus clock speed read from hypervisor : 66000000 Hz Jul 14 23:09:19.671098 kernel: vmware: using clock offset of 3343724314 ns Jul 14 23:09:19.671103 kernel: tsc: Detected 3408.000 MHz processor Jul 14 23:09:19.671108 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 14 23:09:19.671112 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 14 23:09:19.671117 kernel: last_pfn = 0x80000 max_arch_pfn = 0x400000000 Jul 14 23:09:19.671122 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 14 23:09:19.671126 kernel: total RAM covered: 3072M Jul 14 23:09:19.671132 kernel: Found optimal setting for mtrr clean up Jul 14 23:09:19.671138 kernel: gran_size: 64K chunk_size: 64K num_reg: 2 lose cover RAM: 0G Jul 14 23:09:19.671142 kernel: Using GB pages for direct mapping Jul 14 23:09:19.671147 kernel: ACPI: Early table checksum verification disabled Jul 14 23:09:19.671151 kernel: ACPI: RSDP 0x00000000000F6A00 000024 (v02 PTLTD ) Jul 14 23:09:19.671156 kernel: ACPI: XSDT 0x000000007FEE965B 00005C (v01 INTEL 440BX 06040000 VMW 01324272) Jul 14 23:09:19.671160 kernel: ACPI: FACP 0x000000007FEFEE73 0000F4 (v04 INTEL 440BX 06040000 PTL 000F4240) Jul 14 23:09:19.671165 kernel: ACPI: DSDT 0x000000007FEEAD55 01411E (v01 PTLTD Custom 06040000 MSFT 03000001) Jul 14 23:09:19.671169 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 14 23:09:19.671173 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 14 23:09:19.671179 kernel: ACPI: BOOT 0x000000007FEEAD2D 000028 (v01 PTLTD $SBFTBL$ 06040000 LTP 00000001) Jul 14 23:09:19.671186 kernel: ACPI: APIC 0x000000007FEEA5EB 000742 (v01 PTLTD ? APIC 06040000 LTP 00000000) Jul 14 23:09:19.671191 kernel: ACPI: MCFG 0x000000007FEEA5AF 00003C (v01 PTLTD $PCITBL$ 06040000 LTP 00000001) Jul 14 23:09:19.671199 kernel: ACPI: SRAT 0x000000007FEE9757 0008A8 (v02 VMWARE MEMPLUG 06040000 VMW 00000001) Jul 14 23:09:19.671205 kernel: ACPI: HPET 0x000000007FEE971F 000038 (v01 VMWARE VMW HPET 06040000 VMW 00000001) Jul 14 23:09:19.671211 kernel: ACPI: WAET 0x000000007FEE96F7 000028 (v01 VMWARE VMW WAET 06040000 VMW 00000001) Jul 14 23:09:19.671216 kernel: ACPI: Reserving FACP table memory at [mem 0x7fefee73-0x7fefef66] Jul 14 23:09:19.671221 kernel: ACPI: Reserving DSDT table memory at [mem 0x7feead55-0x7fefee72] Jul 14 23:09:19.671226 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 14 23:09:19.671231 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 14 23:09:19.671236 kernel: ACPI: Reserving BOOT table memory at [mem 0x7feead2d-0x7feead54] Jul 14 23:09:19.671240 kernel: ACPI: Reserving APIC table memory at [mem 0x7feea5eb-0x7feead2c] Jul 14 23:09:19.671246 kernel: ACPI: Reserving MCFG table memory at [mem 0x7feea5af-0x7feea5ea] Jul 14 23:09:19.671250 kernel: ACPI: Reserving SRAT table memory at [mem 0x7fee9757-0x7fee9ffe] Jul 14 23:09:19.671256 kernel: ACPI: Reserving HPET table memory at [mem 0x7fee971f-0x7fee9756] Jul 14 23:09:19.671261 kernel: ACPI: Reserving WAET table memory at [mem 0x7fee96f7-0x7fee971e] Jul 14 23:09:19.671266 kernel: system APIC only can use physical flat Jul 14 23:09:19.671270 kernel: Setting APIC routing to physical flat. Jul 14 23:09:19.671275 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Jul 14 23:09:19.671280 kernel: SRAT: PXM 0 -> APIC 0x02 -> Node 0 Jul 14 23:09:19.671285 kernel: SRAT: PXM 0 -> APIC 0x04 -> Node 0 Jul 14 23:09:19.671290 kernel: SRAT: PXM 0 -> APIC 0x06 -> Node 0 Jul 14 23:09:19.671294 kernel: SRAT: PXM 0 -> APIC 0x08 -> Node 0 Jul 14 23:09:19.671300 kernel: SRAT: PXM 0 -> APIC 0x0a -> Node 0 Jul 14 23:09:19.671305 kernel: SRAT: PXM 0 -> APIC 0x0c -> Node 0 Jul 14 23:09:19.671310 kernel: SRAT: PXM 0 -> APIC 0x0e -> Node 0 Jul 14 23:09:19.671315 kernel: SRAT: PXM 0 -> APIC 0x10 -> Node 0 Jul 14 23:09:19.671319 kernel: SRAT: PXM 0 -> APIC 0x12 -> Node 0 Jul 14 23:09:19.671324 kernel: SRAT: PXM 0 -> APIC 0x14 -> Node 0 Jul 14 23:09:19.671329 kernel: SRAT: PXM 0 -> APIC 0x16 -> Node 0 Jul 14 23:09:19.671334 kernel: SRAT: PXM 0 -> APIC 0x18 -> Node 0 Jul 14 23:09:19.671338 kernel: SRAT: PXM 0 -> APIC 0x1a -> Node 0 Jul 14 23:09:19.671343 kernel: SRAT: PXM 0 -> APIC 0x1c -> Node 0 Jul 14 23:09:19.671348 kernel: SRAT: PXM 0 -> APIC 0x1e -> Node 0 Jul 14 23:09:19.671353 kernel: SRAT: PXM 0 -> APIC 0x20 -> Node 0 Jul 14 23:09:19.671358 kernel: SRAT: PXM 0 -> APIC 0x22 -> Node 0 Jul 14 23:09:19.671363 kernel: SRAT: PXM 0 -> APIC 0x24 -> Node 0 Jul 14 23:09:19.671368 kernel: SRAT: PXM 0 -> APIC 0x26 -> Node 0 Jul 14 23:09:19.671372 kernel: SRAT: PXM 0 -> APIC 0x28 -> Node 0 Jul 14 23:09:19.671377 kernel: SRAT: PXM 0 -> APIC 0x2a -> Node 0 Jul 14 23:09:19.671382 kernel: SRAT: PXM 0 -> APIC 0x2c -> Node 0 Jul 14 23:09:19.671386 kernel: SRAT: PXM 0 -> APIC 0x2e -> Node 0 Jul 14 23:09:19.671391 kernel: SRAT: PXM 0 -> APIC 0x30 -> Node 0 Jul 14 23:09:19.671397 kernel: SRAT: PXM 0 -> APIC 0x32 -> Node 0 Jul 14 23:09:19.671401 kernel: SRAT: PXM 0 -> APIC 0x34 -> Node 0 Jul 14 23:09:19.671406 kernel: SRAT: PXM 0 -> APIC 0x36 -> Node 0 Jul 14 23:09:19.671411 kernel: SRAT: PXM 0 -> APIC 0x38 -> Node 0 Jul 14 23:09:19.671416 kernel: SRAT: PXM 0 -> APIC 0x3a -> Node 0 Jul 14 23:09:19.671421 kernel: SRAT: PXM 0 -> APIC 0x3c -> Node 0 Jul 14 23:09:19.671425 kernel: SRAT: PXM 0 -> APIC 0x3e -> Node 0 Jul 14 23:09:19.671430 kernel: SRAT: PXM 0 -> APIC 0x40 -> Node 0 Jul 14 23:09:19.671435 kernel: SRAT: PXM 0 -> APIC 0x42 -> Node 0 Jul 14 23:09:19.671440 kernel: SRAT: PXM 0 -> APIC 0x44 -> Node 0 Jul 14 23:09:19.671445 kernel: SRAT: PXM 0 -> APIC 0x46 -> Node 0 Jul 14 23:09:19.671450 kernel: SRAT: PXM 0 -> APIC 0x48 -> Node 0 Jul 14 23:09:19.671455 kernel: SRAT: PXM 0 -> APIC 0x4a -> Node 0 Jul 14 23:09:19.671460 kernel: SRAT: PXM 0 -> APIC 0x4c -> Node 0 Jul 14 23:09:19.671464 kernel: SRAT: PXM 0 -> APIC 0x4e -> Node 0 Jul 14 23:09:19.671469 kernel: SRAT: PXM 0 -> APIC 0x50 -> Node 0 Jul 14 23:09:19.671474 kernel: SRAT: PXM 0 -> APIC 0x52 -> Node 0 Jul 14 23:09:19.671479 kernel: SRAT: PXM 0 -> APIC 0x54 -> Node 0 Jul 14 23:09:19.671484 kernel: SRAT: PXM 0 -> APIC 0x56 -> Node 0 Jul 14 23:09:19.671489 kernel: SRAT: PXM 0 -> APIC 0x58 -> Node 0 Jul 14 23:09:19.671495 kernel: SRAT: PXM 0 -> APIC 0x5a -> Node 0 Jul 14 23:09:19.671499 kernel: SRAT: PXM 0 -> APIC 0x5c -> Node 0 Jul 14 23:09:19.671504 kernel: SRAT: PXM 0 -> APIC 0x5e -> Node 0 Jul 14 23:09:19.671509 kernel: SRAT: PXM 0 -> APIC 0x60 -> Node 0 Jul 14 23:09:19.671514 kernel: SRAT: PXM 0 -> APIC 0x62 -> Node 0 Jul 14 23:09:19.671518 kernel: SRAT: PXM 0 -> APIC 0x64 -> Node 0 Jul 14 23:09:19.671523 kernel: SRAT: PXM 0 -> APIC 0x66 -> Node 0 Jul 14 23:09:19.671528 kernel: SRAT: PXM 0 -> APIC 0x68 -> Node 0 Jul 14 23:09:19.671533 kernel: SRAT: PXM 0 -> APIC 0x6a -> Node 0 Jul 14 23:09:19.671538 kernel: SRAT: PXM 0 -> APIC 0x6c -> Node 0 Jul 14 23:09:19.671543 kernel: SRAT: PXM 0 -> APIC 0x6e -> Node 0 Jul 14 23:09:19.671548 kernel: SRAT: PXM 0 -> APIC 0x70 -> Node 0 Jul 14 23:09:19.671553 kernel: SRAT: PXM 0 -> APIC 0x72 -> Node 0 Jul 14 23:09:19.671557 kernel: SRAT: PXM 0 -> APIC 0x74 -> Node 0 Jul 14 23:09:19.671562 kernel: SRAT: PXM 0 -> APIC 0x76 -> Node 0 Jul 14 23:09:19.671567 kernel: SRAT: PXM 0 -> APIC 0x78 -> Node 0 Jul 14 23:09:19.671576 kernel: SRAT: PXM 0 -> APIC 0x7a -> Node 0 Jul 14 23:09:19.671582 kernel: SRAT: PXM 0 -> APIC 0x7c -> Node 0 Jul 14 23:09:19.671587 kernel: SRAT: PXM 0 -> APIC 0x7e -> Node 0 Jul 14 23:09:19.671592 kernel: SRAT: PXM 0 -> APIC 0x80 -> Node 0 Jul 14 23:09:19.671598 kernel: SRAT: PXM 0 -> APIC 0x82 -> Node 0 Jul 14 23:09:19.671603 kernel: SRAT: PXM 0 -> APIC 0x84 -> Node 0 Jul 14 23:09:19.671609 kernel: SRAT: PXM 0 -> APIC 0x86 -> Node 0 Jul 14 23:09:19.671614 kernel: SRAT: PXM 0 -> APIC 0x88 -> Node 0 Jul 14 23:09:19.671619 kernel: SRAT: PXM 0 -> APIC 0x8a -> Node 0 Jul 14 23:09:19.671624 kernel: SRAT: PXM 0 -> APIC 0x8c -> Node 0 Jul 14 23:09:19.671629 kernel: SRAT: PXM 0 -> APIC 0x8e -> Node 0 Jul 14 23:09:19.671635 kernel: SRAT: PXM 0 -> APIC 0x90 -> Node 0 Jul 14 23:09:19.671640 kernel: SRAT: PXM 0 -> APIC 0x92 -> Node 0 Jul 14 23:09:19.671646 kernel: SRAT: PXM 0 -> APIC 0x94 -> Node 0 Jul 14 23:09:19.671651 kernel: SRAT: PXM 0 -> APIC 0x96 -> Node 0 Jul 14 23:09:19.671656 kernel: SRAT: PXM 0 -> APIC 0x98 -> Node 0 Jul 14 23:09:19.671661 kernel: SRAT: PXM 0 -> APIC 0x9a -> Node 0 Jul 14 23:09:19.671666 kernel: SRAT: PXM 0 -> APIC 0x9c -> Node 0 Jul 14 23:09:19.671671 kernel: SRAT: PXM 0 -> APIC 0x9e -> Node 0 Jul 14 23:09:19.671676 kernel: SRAT: PXM 0 -> APIC 0xa0 -> Node 0 Jul 14 23:09:19.671682 kernel: SRAT: PXM 0 -> APIC 0xa2 -> Node 0 Jul 14 23:09:19.671688 kernel: SRAT: PXM 0 -> APIC 0xa4 -> Node 0 Jul 14 23:09:19.671693 kernel: SRAT: PXM 0 -> APIC 0xa6 -> Node 0 Jul 14 23:09:19.671698 kernel: SRAT: PXM 0 -> APIC 0xa8 -> Node 0 Jul 14 23:09:19.671703 kernel: SRAT: PXM 0 -> APIC 0xaa -> Node 0 Jul 14 23:09:19.671708 kernel: SRAT: PXM 0 -> APIC 0xac -> Node 0 Jul 14 23:09:19.671713 kernel: SRAT: PXM 0 -> APIC 0xae -> Node 0 Jul 14 23:09:19.671718 kernel: SRAT: PXM 0 -> APIC 0xb0 -> Node 0 Jul 14 23:09:19.671723 kernel: SRAT: PXM 0 -> APIC 0xb2 -> Node 0 Jul 14 23:09:19.671728 kernel: SRAT: PXM 0 -> APIC 0xb4 -> Node 0 Jul 14 23:09:19.671734 kernel: SRAT: PXM 0 -> APIC 0xb6 -> Node 0 Jul 14 23:09:19.671740 kernel: SRAT: PXM 0 -> APIC 0xb8 -> Node 0 Jul 14 23:09:19.671745 kernel: SRAT: PXM 0 -> APIC 0xba -> Node 0 Jul 14 23:09:19.671750 kernel: SRAT: PXM 0 -> APIC 0xbc -> Node 0 Jul 14 23:09:19.671755 kernel: SRAT: PXM 0 -> APIC 0xbe -> Node 0 Jul 14 23:09:19.671761 kernel: SRAT: PXM 0 -> APIC 0xc0 -> Node 0 Jul 14 23:09:19.671766 kernel: SRAT: PXM 0 -> APIC 0xc2 -> Node 0 Jul 14 23:09:19.671771 kernel: SRAT: PXM 0 -> APIC 0xc4 -> Node 0 Jul 14 23:09:19.671776 kernel: SRAT: PXM 0 -> APIC 0xc6 -> Node 0 Jul 14 23:09:19.671781 kernel: SRAT: PXM 0 -> APIC 0xc8 -> Node 0 Jul 14 23:09:19.671787 kernel: SRAT: PXM 0 -> APIC 0xca -> Node 0 Jul 14 23:09:19.671793 kernel: SRAT: PXM 0 -> APIC 0xcc -> Node 0 Jul 14 23:09:19.671798 kernel: SRAT: PXM 0 -> APIC 0xce -> Node 0 Jul 14 23:09:19.671803 kernel: SRAT: PXM 0 -> APIC 0xd0 -> Node 0 Jul 14 23:09:19.671808 kernel: SRAT: PXM 0 -> APIC 0xd2 -> Node 0 Jul 14 23:09:19.671813 kernel: SRAT: PXM 0 -> APIC 0xd4 -> Node 0 Jul 14 23:09:19.671818 kernel: SRAT: PXM 0 -> APIC 0xd6 -> Node 0 Jul 14 23:09:19.671823 kernel: SRAT: PXM 0 -> APIC 0xd8 -> Node 0 Jul 14 23:09:19.671829 kernel: SRAT: PXM 0 -> APIC 0xda -> Node 0 Jul 14 23:09:19.671834 kernel: SRAT: PXM 0 -> APIC 0xdc -> Node 0 Jul 14 23:09:19.671839 kernel: SRAT: PXM 0 -> APIC 0xde -> Node 0 Jul 14 23:09:19.671845 kernel: SRAT: PXM 0 -> APIC 0xe0 -> Node 0 Jul 14 23:09:19.671850 kernel: SRAT: PXM 0 -> APIC 0xe2 -> Node 0 Jul 14 23:09:19.671855 kernel: SRAT: PXM 0 -> APIC 0xe4 -> Node 0 Jul 14 23:09:19.671860 kernel: SRAT: PXM 0 -> APIC 0xe6 -> Node 0 Jul 14 23:09:19.671865 kernel: SRAT: PXM 0 -> APIC 0xe8 -> Node 0 Jul 14 23:09:19.671870 kernel: SRAT: PXM 0 -> APIC 0xea -> Node 0 Jul 14 23:09:19.671875 kernel: SRAT: PXM 0 -> APIC 0xec -> Node 0 Jul 14 23:09:19.671880 kernel: SRAT: PXM 0 -> APIC 0xee -> Node 0 Jul 14 23:09:19.671886 kernel: SRAT: PXM 0 -> APIC 0xf0 -> Node 0 Jul 14 23:09:19.671892 kernel: SRAT: PXM 0 -> APIC 0xf2 -> Node 0 Jul 14 23:09:19.671897 kernel: SRAT: PXM 0 -> APIC 0xf4 -> Node 0 Jul 14 23:09:19.671902 kernel: SRAT: PXM 0 -> APIC 0xf6 -> Node 0 Jul 14 23:09:19.671907 kernel: SRAT: PXM 0 -> APIC 0xf8 -> Node 0 Jul 14 23:09:19.671912 kernel: SRAT: PXM 0 -> APIC 0xfa -> Node 0 Jul 14 23:09:19.671917 kernel: SRAT: PXM 0 -> APIC 0xfc -> Node 0 Jul 14 23:09:19.671922 kernel: SRAT: PXM 0 -> APIC 0xfe -> Node 0 Jul 14 23:09:19.671928 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] Jul 14 23:09:19.671933 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x7fffffff] Jul 14 23:09:19.671938 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000-0xbfffffff] hotplug Jul 14 23:09:19.671944 kernel: NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x7fffffff] -> [mem 0x00000000-0x7fffffff] Jul 14 23:09:19.671950 kernel: NODE_DATA(0) allocated [mem 0x7fffa000-0x7fffffff] Jul 14 23:09:19.671955 kernel: Zone ranges: Jul 14 23:09:19.671961 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 14 23:09:19.671966 kernel: DMA32 [mem 0x0000000001000000-0x000000007fffffff] Jul 14 23:09:19.671971 kernel: Normal empty Jul 14 23:09:19.671976 kernel: Movable zone start for each node Jul 14 23:09:19.671981 kernel: Early memory node ranges Jul 14 23:09:19.671987 kernel: node 0: [mem 0x0000000000001000-0x000000000009dfff] Jul 14 23:09:19.671993 kernel: node 0: [mem 0x0000000000100000-0x000000007fedffff] Jul 14 23:09:19.671998 kernel: node 0: [mem 0x000000007ff00000-0x000000007fffffff] Jul 14 23:09:19.672004 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007fffffff] Jul 14 23:09:19.672009 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 14 23:09:19.672014 kernel: On node 0, zone DMA: 98 pages in unavailable ranges Jul 14 23:09:19.672019 kernel: On node 0, zone DMA32: 32 pages in unavailable ranges Jul 14 23:09:19.672025 kernel: ACPI: PM-Timer IO Port: 0x1008 Jul 14 23:09:19.672030 kernel: system APIC only can use physical flat Jul 14 23:09:19.672035 kernel: ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1]) Jul 14 23:09:19.672040 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) Jul 14 23:09:19.672046 kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) Jul 14 23:09:19.672056 kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) Jul 14 23:09:19.672061 kernel: ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) Jul 14 23:09:19.672066 kernel: ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) Jul 14 23:09:19.672071 kernel: ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) Jul 14 23:09:19.672091 kernel: ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) Jul 14 23:09:19.672097 kernel: ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) Jul 14 23:09:19.672102 kernel: ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) Jul 14 23:09:19.672107 kernel: ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) Jul 14 23:09:19.672115 kernel: ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) Jul 14 23:09:19.672120 kernel: ACPI: LAPIC_NMI (acpi_id[0x0c] high edge lint[0x1]) Jul 14 23:09:19.672125 kernel: ACPI: LAPIC_NMI (acpi_id[0x0d] high edge lint[0x1]) Jul 14 23:09:19.672131 kernel: ACPI: LAPIC_NMI (acpi_id[0x0e] high edge lint[0x1]) Jul 14 23:09:19.672136 kernel: ACPI: LAPIC_NMI (acpi_id[0x0f] high edge lint[0x1]) Jul 14 23:09:19.672141 kernel: ACPI: LAPIC_NMI (acpi_id[0x10] high edge lint[0x1]) Jul 14 23:09:19.672146 kernel: ACPI: LAPIC_NMI (acpi_id[0x11] high edge lint[0x1]) Jul 14 23:09:19.672151 kernel: ACPI: LAPIC_NMI (acpi_id[0x12] high edge lint[0x1]) Jul 14 23:09:19.672156 kernel: ACPI: LAPIC_NMI (acpi_id[0x13] high edge lint[0x1]) Jul 14 23:09:19.672161 kernel: ACPI: LAPIC_NMI (acpi_id[0x14] high edge lint[0x1]) Jul 14 23:09:19.672167 kernel: ACPI: LAPIC_NMI (acpi_id[0x15] high edge lint[0x1]) Jul 14 23:09:19.672173 kernel: ACPI: LAPIC_NMI (acpi_id[0x16] high edge lint[0x1]) Jul 14 23:09:19.672178 kernel: ACPI: LAPIC_NMI (acpi_id[0x17] high edge lint[0x1]) Jul 14 23:09:19.672183 kernel: ACPI: LAPIC_NMI (acpi_id[0x18] high edge lint[0x1]) Jul 14 23:09:19.672188 kernel: ACPI: LAPIC_NMI (acpi_id[0x19] high edge lint[0x1]) Jul 14 23:09:19.672193 kernel: ACPI: LAPIC_NMI (acpi_id[0x1a] high edge lint[0x1]) Jul 14 23:09:19.672198 kernel: ACPI: LAPIC_NMI (acpi_id[0x1b] high edge lint[0x1]) Jul 14 23:09:19.672204 kernel: ACPI: LAPIC_NMI (acpi_id[0x1c] high edge lint[0x1]) Jul 14 23:09:19.672209 kernel: ACPI: LAPIC_NMI (acpi_id[0x1d] high edge lint[0x1]) Jul 14 23:09:19.672215 kernel: ACPI: LAPIC_NMI (acpi_id[0x1e] high edge lint[0x1]) Jul 14 23:09:19.672220 kernel: ACPI: LAPIC_NMI (acpi_id[0x1f] high edge lint[0x1]) Jul 14 23:09:19.672225 kernel: ACPI: LAPIC_NMI (acpi_id[0x20] high edge lint[0x1]) Jul 14 23:09:19.672230 kernel: ACPI: LAPIC_NMI (acpi_id[0x21] high edge lint[0x1]) Jul 14 23:09:19.672235 kernel: ACPI: LAPIC_NMI (acpi_id[0x22] high edge lint[0x1]) Jul 14 23:09:19.672241 kernel: ACPI: LAPIC_NMI (acpi_id[0x23] high edge lint[0x1]) Jul 14 23:09:19.672246 kernel: ACPI: LAPIC_NMI (acpi_id[0x24] high edge lint[0x1]) Jul 14 23:09:19.672251 kernel: ACPI: LAPIC_NMI (acpi_id[0x25] high edge lint[0x1]) Jul 14 23:09:19.672256 kernel: ACPI: LAPIC_NMI (acpi_id[0x26] high edge lint[0x1]) Jul 14 23:09:19.672262 kernel: ACPI: LAPIC_NMI (acpi_id[0x27] high edge lint[0x1]) Jul 14 23:09:19.672267 kernel: ACPI: LAPIC_NMI (acpi_id[0x28] high edge lint[0x1]) Jul 14 23:09:19.672272 kernel: ACPI: LAPIC_NMI (acpi_id[0x29] high edge lint[0x1]) Jul 14 23:09:19.672277 kernel: ACPI: LAPIC_NMI (acpi_id[0x2a] high edge lint[0x1]) Jul 14 23:09:19.672282 kernel: ACPI: LAPIC_NMI (acpi_id[0x2b] high edge lint[0x1]) Jul 14 23:09:19.672287 kernel: ACPI: LAPIC_NMI (acpi_id[0x2c] high edge lint[0x1]) Jul 14 23:09:19.672293 kernel: ACPI: LAPIC_NMI (acpi_id[0x2d] high edge lint[0x1]) Jul 14 23:09:19.672298 kernel: ACPI: LAPIC_NMI (acpi_id[0x2e] high edge lint[0x1]) Jul 14 23:09:19.672303 kernel: ACPI: LAPIC_NMI (acpi_id[0x2f] high edge lint[0x1]) Jul 14 23:09:19.672308 kernel: ACPI: LAPIC_NMI (acpi_id[0x30] high edge lint[0x1]) Jul 14 23:09:19.672314 kernel: ACPI: LAPIC_NMI (acpi_id[0x31] high edge lint[0x1]) Jul 14 23:09:19.672319 kernel: ACPI: LAPIC_NMI (acpi_id[0x32] high edge lint[0x1]) Jul 14 23:09:19.672325 kernel: ACPI: LAPIC_NMI (acpi_id[0x33] high edge lint[0x1]) Jul 14 23:09:19.672330 kernel: ACPI: LAPIC_NMI (acpi_id[0x34] high edge lint[0x1]) Jul 14 23:09:19.672335 kernel: ACPI: LAPIC_NMI (acpi_id[0x35] high edge lint[0x1]) Jul 14 23:09:19.672340 kernel: ACPI: LAPIC_NMI (acpi_id[0x36] high edge lint[0x1]) Jul 14 23:09:19.672345 kernel: ACPI: LAPIC_NMI (acpi_id[0x37] high edge lint[0x1]) Jul 14 23:09:19.672351 kernel: ACPI: LAPIC_NMI (acpi_id[0x38] high edge lint[0x1]) Jul 14 23:09:19.672356 kernel: ACPI: LAPIC_NMI (acpi_id[0x39] high edge lint[0x1]) Jul 14 23:09:19.672363 kernel: ACPI: LAPIC_NMI (acpi_id[0x3a] high edge lint[0x1]) Jul 14 23:09:19.672368 kernel: ACPI: LAPIC_NMI (acpi_id[0x3b] high edge lint[0x1]) Jul 14 23:09:19.672373 kernel: ACPI: LAPIC_NMI (acpi_id[0x3c] high edge lint[0x1]) Jul 14 23:09:19.672378 kernel: ACPI: LAPIC_NMI (acpi_id[0x3d] high edge lint[0x1]) Jul 14 23:09:19.672383 kernel: ACPI: LAPIC_NMI (acpi_id[0x3e] high edge lint[0x1]) Jul 14 23:09:19.672388 kernel: ACPI: LAPIC_NMI (acpi_id[0x3f] high edge lint[0x1]) Jul 14 23:09:19.672394 kernel: ACPI: LAPIC_NMI (acpi_id[0x40] high edge lint[0x1]) Jul 14 23:09:19.672399 kernel: ACPI: LAPIC_NMI (acpi_id[0x41] high edge lint[0x1]) Jul 14 23:09:19.672404 kernel: ACPI: LAPIC_NMI (acpi_id[0x42] high edge lint[0x1]) Jul 14 23:09:19.672409 kernel: ACPI: LAPIC_NMI (acpi_id[0x43] high edge lint[0x1]) Jul 14 23:09:19.672415 kernel: ACPI: LAPIC_NMI (acpi_id[0x44] high edge lint[0x1]) Jul 14 23:09:19.672420 kernel: ACPI: LAPIC_NMI (acpi_id[0x45] high edge lint[0x1]) Jul 14 23:09:19.672425 kernel: ACPI: LAPIC_NMI (acpi_id[0x46] high edge lint[0x1]) Jul 14 23:09:19.672430 kernel: ACPI: LAPIC_NMI (acpi_id[0x47] high edge lint[0x1]) Jul 14 23:09:19.672436 kernel: ACPI: LAPIC_NMI (acpi_id[0x48] high edge lint[0x1]) Jul 14 23:09:19.672441 kernel: ACPI: LAPIC_NMI (acpi_id[0x49] high edge lint[0x1]) Jul 14 23:09:19.672446 kernel: ACPI: LAPIC_NMI (acpi_id[0x4a] high edge lint[0x1]) Jul 14 23:09:19.672451 kernel: ACPI: LAPIC_NMI (acpi_id[0x4b] high edge lint[0x1]) Jul 14 23:09:19.672456 kernel: ACPI: LAPIC_NMI (acpi_id[0x4c] high edge lint[0x1]) Jul 14 23:09:19.672462 kernel: ACPI: LAPIC_NMI (acpi_id[0x4d] high edge lint[0x1]) Jul 14 23:09:19.672468 kernel: ACPI: LAPIC_NMI (acpi_id[0x4e] high edge lint[0x1]) Jul 14 23:09:19.672473 kernel: ACPI: LAPIC_NMI (acpi_id[0x4f] high edge lint[0x1]) Jul 14 23:09:19.672478 kernel: ACPI: LAPIC_NMI (acpi_id[0x50] high edge lint[0x1]) Jul 14 23:09:19.672483 kernel: ACPI: LAPIC_NMI (acpi_id[0x51] high edge lint[0x1]) Jul 14 23:09:19.672488 kernel: ACPI: LAPIC_NMI (acpi_id[0x52] high edge lint[0x1]) Jul 14 23:09:19.672493 kernel: ACPI: LAPIC_NMI (acpi_id[0x53] high edge lint[0x1]) Jul 14 23:09:19.672498 kernel: ACPI: LAPIC_NMI (acpi_id[0x54] high edge lint[0x1]) Jul 14 23:09:19.672503 kernel: ACPI: LAPIC_NMI (acpi_id[0x55] high edge lint[0x1]) Jul 14 23:09:19.672510 kernel: ACPI: LAPIC_NMI (acpi_id[0x56] high edge lint[0x1]) Jul 14 23:09:19.672515 kernel: ACPI: LAPIC_NMI (acpi_id[0x57] high edge lint[0x1]) Jul 14 23:09:19.672520 kernel: ACPI: LAPIC_NMI (acpi_id[0x58] high edge lint[0x1]) Jul 14 23:09:19.672525 kernel: ACPI: LAPIC_NMI (acpi_id[0x59] high edge lint[0x1]) Jul 14 23:09:19.672530 kernel: ACPI: LAPIC_NMI (acpi_id[0x5a] high edge lint[0x1]) Jul 14 23:09:19.672535 kernel: ACPI: LAPIC_NMI (acpi_id[0x5b] high edge lint[0x1]) Jul 14 23:09:19.672540 kernel: ACPI: LAPIC_NMI (acpi_id[0x5c] high edge lint[0x1]) Jul 14 23:09:19.672545 kernel: ACPI: LAPIC_NMI (acpi_id[0x5d] high edge lint[0x1]) Jul 14 23:09:19.672551 kernel: ACPI: LAPIC_NMI (acpi_id[0x5e] high edge lint[0x1]) Jul 14 23:09:19.672556 kernel: ACPI: LAPIC_NMI (acpi_id[0x5f] high edge lint[0x1]) Jul 14 23:09:19.672562 kernel: ACPI: LAPIC_NMI (acpi_id[0x60] high edge lint[0x1]) Jul 14 23:09:19.672567 kernel: ACPI: LAPIC_NMI (acpi_id[0x61] high edge lint[0x1]) Jul 14 23:09:19.672572 kernel: ACPI: LAPIC_NMI (acpi_id[0x62] high edge lint[0x1]) Jul 14 23:09:19.672577 kernel: ACPI: LAPIC_NMI (acpi_id[0x63] high edge lint[0x1]) Jul 14 23:09:19.672583 kernel: ACPI: LAPIC_NMI (acpi_id[0x64] high edge lint[0x1]) Jul 14 23:09:19.672588 kernel: ACPI: LAPIC_NMI (acpi_id[0x65] high edge lint[0x1]) Jul 14 23:09:19.672593 kernel: ACPI: LAPIC_NMI (acpi_id[0x66] high edge lint[0x1]) Jul 14 23:09:19.672598 kernel: ACPI: LAPIC_NMI (acpi_id[0x67] high edge lint[0x1]) Jul 14 23:09:19.672603 kernel: ACPI: LAPIC_NMI (acpi_id[0x68] high edge lint[0x1]) Jul 14 23:09:19.672610 kernel: ACPI: LAPIC_NMI (acpi_id[0x69] high edge lint[0x1]) Jul 14 23:09:19.672615 kernel: ACPI: LAPIC_NMI (acpi_id[0x6a] high edge lint[0x1]) Jul 14 23:09:19.672620 kernel: ACPI: LAPIC_NMI (acpi_id[0x6b] high edge lint[0x1]) Jul 14 23:09:19.672625 kernel: ACPI: LAPIC_NMI (acpi_id[0x6c] high edge lint[0x1]) Jul 14 23:09:19.672630 kernel: ACPI: LAPIC_NMI (acpi_id[0x6d] high edge lint[0x1]) Jul 14 23:09:19.672635 kernel: ACPI: LAPIC_NMI (acpi_id[0x6e] high edge lint[0x1]) Jul 14 23:09:19.672640 kernel: ACPI: LAPIC_NMI (acpi_id[0x6f] high edge lint[0x1]) Jul 14 23:09:19.672646 kernel: ACPI: LAPIC_NMI (acpi_id[0x70] high edge lint[0x1]) Jul 14 23:09:19.672651 kernel: ACPI: LAPIC_NMI (acpi_id[0x71] high edge lint[0x1]) Jul 14 23:09:19.672656 kernel: ACPI: LAPIC_NMI (acpi_id[0x72] high edge lint[0x1]) Jul 14 23:09:19.672662 kernel: ACPI: LAPIC_NMI (acpi_id[0x73] high edge lint[0x1]) Jul 14 23:09:19.672667 kernel: ACPI: LAPIC_NMI (acpi_id[0x74] high edge lint[0x1]) Jul 14 23:09:19.672672 kernel: ACPI: LAPIC_NMI (acpi_id[0x75] high edge lint[0x1]) Jul 14 23:09:19.672678 kernel: ACPI: LAPIC_NMI (acpi_id[0x76] high edge lint[0x1]) Jul 14 23:09:19.672683 kernel: ACPI: LAPIC_NMI (acpi_id[0x77] high edge lint[0x1]) Jul 14 23:09:19.672688 kernel: ACPI: LAPIC_NMI (acpi_id[0x78] high edge lint[0x1]) Jul 14 23:09:19.672693 kernel: ACPI: LAPIC_NMI (acpi_id[0x79] high edge lint[0x1]) Jul 14 23:09:19.672699 kernel: ACPI: LAPIC_NMI (acpi_id[0x7a] high edge lint[0x1]) Jul 14 23:09:19.672704 kernel: ACPI: LAPIC_NMI (acpi_id[0x7b] high edge lint[0x1]) Jul 14 23:09:19.672710 kernel: ACPI: LAPIC_NMI (acpi_id[0x7c] high edge lint[0x1]) Jul 14 23:09:19.672715 kernel: ACPI: LAPIC_NMI (acpi_id[0x7d] high edge lint[0x1]) Jul 14 23:09:19.672720 kernel: ACPI: LAPIC_NMI (acpi_id[0x7e] high edge lint[0x1]) Jul 14 23:09:19.672726 kernel: ACPI: LAPIC_NMI (acpi_id[0x7f] high edge lint[0x1]) Jul 14 23:09:19.672731 kernel: IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23 Jul 14 23:09:19.672736 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 high edge) Jul 14 23:09:19.672741 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 14 23:09:19.672747 kernel: ACPI: HPET id: 0x8086af01 base: 0xfed00000 Jul 14 23:09:19.672752 kernel: TSC deadline timer available Jul 14 23:09:19.672758 kernel: smpboot: Allowing 128 CPUs, 126 hotplug CPUs Jul 14 23:09:19.672764 kernel: [mem 0x80000000-0xefffffff] available for PCI devices Jul 14 23:09:19.672769 kernel: Booting paravirtualized kernel on VMware hypervisor Jul 14 23:09:19.672775 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 14 23:09:19.672780 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:128 nr_node_ids:1 Jul 14 23:09:19.672786 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u262144 Jul 14 23:09:19.672791 kernel: pcpu-alloc: s188696 r8192 d32488 u262144 alloc=1*2097152 Jul 14 23:09:19.672796 kernel: pcpu-alloc: [0] 000 001 002 003 004 005 006 007 Jul 14 23:09:19.672801 kernel: pcpu-alloc: [0] 008 009 010 011 012 013 014 015 Jul 14 23:09:19.672807 kernel: pcpu-alloc: [0] 016 017 018 019 020 021 022 023 Jul 14 23:09:19.672813 kernel: pcpu-alloc: [0] 024 025 026 027 028 029 030 031 Jul 14 23:09:19.672818 kernel: pcpu-alloc: [0] 032 033 034 035 036 037 038 039 Jul 14 23:09:19.672823 kernel: pcpu-alloc: [0] 040 041 042 043 044 045 046 047 Jul 14 23:09:19.672828 kernel: pcpu-alloc: [0] 048 049 050 051 052 053 054 055 Jul 14 23:09:19.672840 kernel: pcpu-alloc: [0] 056 057 058 059 060 061 062 063 Jul 14 23:09:19.672846 kernel: pcpu-alloc: [0] 064 065 066 067 068 069 070 071 Jul 14 23:09:19.672852 kernel: pcpu-alloc: [0] 072 073 074 075 076 077 078 079 Jul 14 23:09:19.672857 kernel: pcpu-alloc: [0] 080 081 082 083 084 085 086 087 Jul 14 23:09:19.672864 kernel: pcpu-alloc: [0] 088 089 090 091 092 093 094 095 Jul 14 23:09:19.672869 kernel: pcpu-alloc: [0] 096 097 098 099 100 101 102 103 Jul 14 23:09:19.672875 kernel: pcpu-alloc: [0] 104 105 106 107 108 109 110 111 Jul 14 23:09:19.672880 kernel: pcpu-alloc: [0] 112 113 114 115 116 117 118 119 Jul 14 23:09:19.672885 kernel: pcpu-alloc: [0] 120 121 122 123 124 125 126 127 Jul 14 23:09:19.672891 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515808 Jul 14 23:09:19.672897 kernel: Policy zone: DMA32 Jul 14 23:09:19.672904 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=d9618a329f89744ce954b0fa1b02ce8164745af7389f9de9c3421ad2087e0dba Jul 14 23:09:19.672911 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 14 23:09:19.672917 kernel: printk: log_buf_len individual max cpu contribution: 4096 bytes Jul 14 23:09:19.672923 kernel: printk: log_buf_len total cpu_extra contributions: 520192 bytes Jul 14 23:09:19.672928 kernel: printk: log_buf_len min size: 262144 bytes Jul 14 23:09:19.672934 kernel: printk: log_buf_len: 1048576 bytes Jul 14 23:09:19.672939 kernel: printk: early log buf free: 239728(91%) Jul 14 23:09:19.672945 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 14 23:09:19.672951 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jul 14 23:09:19.672956 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 14 23:09:19.672963 kernel: Memory: 1940392K/2096628K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 155976K reserved, 0K cma-reserved) Jul 14 23:09:19.672969 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=128, Nodes=1 Jul 14 23:09:19.672974 kernel: ftrace: allocating 34607 entries in 136 pages Jul 14 23:09:19.672980 kernel: ftrace: allocated 136 pages with 2 groups Jul 14 23:09:19.672987 kernel: rcu: Hierarchical RCU implementation. Jul 14 23:09:19.672993 kernel: rcu: RCU event tracing is enabled. Jul 14 23:09:19.672999 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=128. Jul 14 23:09:19.673005 kernel: Rude variant of Tasks RCU enabled. Jul 14 23:09:19.673010 kernel: Tracing variant of Tasks RCU enabled. Jul 14 23:09:19.673016 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 14 23:09:19.673022 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=128 Jul 14 23:09:19.673028 kernel: NR_IRQS: 33024, nr_irqs: 1448, preallocated irqs: 16 Jul 14 23:09:19.673033 kernel: random: crng init done Jul 14 23:09:19.673038 kernel: Console: colour VGA+ 80x25 Jul 14 23:09:19.673045 kernel: printk: console [tty0] enabled Jul 14 23:09:19.673061 kernel: printk: console [ttyS0] enabled Jul 14 23:09:19.673067 kernel: ACPI: Core revision 20210730 Jul 14 23:09:19.673081 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns Jul 14 23:09:19.673087 kernel: APIC: Switch to symmetric I/O mode setup Jul 14 23:09:19.673093 kernel: x2apic enabled Jul 14 23:09:19.673098 kernel: Switched APIC routing to physical x2apic. Jul 14 23:09:19.673104 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 14 23:09:19.673110 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 14 23:09:19.673117 kernel: Calibrating delay loop (skipped) preset value.. 6816.00 BogoMIPS (lpj=3408000) Jul 14 23:09:19.673123 kernel: Disabled fast string operations Jul 14 23:09:19.673128 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Jul 14 23:09:19.673134 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Jul 14 23:09:19.673140 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 14 23:09:19.673146 kernel: Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Jul 14 23:09:19.673151 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on vm exit Jul 14 23:09:19.673157 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall Jul 14 23:09:19.673162 kernel: Spectre V2 : Mitigation: Enhanced / Automatic IBRS Jul 14 23:09:19.673169 kernel: Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Jul 14 23:09:19.673175 kernel: RETBleed: Mitigation: Enhanced IBRS Jul 14 23:09:19.673180 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 14 23:09:19.673186 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 14 23:09:19.673192 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Jul 14 23:09:19.673197 kernel: SRBDS: Unknown: Dependent on hypervisor status Jul 14 23:09:19.673203 kernel: GDS: Unknown: Dependent on hypervisor status Jul 14 23:09:19.673209 kernel: ITS: Mitigation: Aligned branch/return thunks Jul 14 23:09:19.673214 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 14 23:09:19.673221 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 14 23:09:19.673227 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 14 23:09:19.673232 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 14 23:09:19.673238 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'compacted' format. Jul 14 23:09:19.673244 kernel: Freeing SMP alternatives memory: 32K Jul 14 23:09:19.673250 kernel: pid_max: default: 131072 minimum: 1024 Jul 14 23:09:19.673255 kernel: LSM: Security Framework initializing Jul 14 23:09:19.673262 kernel: SELinux: Initializing. Jul 14 23:09:19.673267 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 14 23:09:19.673274 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 14 23:09:19.673280 kernel: smpboot: CPU0: Intel(R) Xeon(R) E-2278G CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0xd) Jul 14 23:09:19.673285 kernel: Performance Events: Skylake events, core PMU driver. Jul 14 23:09:19.673291 kernel: core: CPUID marked event: 'cpu cycles' unavailable Jul 14 23:09:19.673296 kernel: core: CPUID marked event: 'instructions' unavailable Jul 14 23:09:19.673302 kernel: core: CPUID marked event: 'bus cycles' unavailable Jul 14 23:09:19.673307 kernel: core: CPUID marked event: 'cache references' unavailable Jul 14 23:09:19.673312 kernel: core: CPUID marked event: 'cache misses' unavailable Jul 14 23:09:19.673319 kernel: core: CPUID marked event: 'branch instructions' unavailable Jul 14 23:09:19.673325 kernel: core: CPUID marked event: 'branch misses' unavailable Jul 14 23:09:19.673330 kernel: ... version: 1 Jul 14 23:09:19.673336 kernel: ... bit width: 48 Jul 14 23:09:19.673341 kernel: ... generic registers: 4 Jul 14 23:09:19.673347 kernel: ... value mask: 0000ffffffffffff Jul 14 23:09:19.673352 kernel: ... max period: 000000007fffffff Jul 14 23:09:19.673358 kernel: ... fixed-purpose events: 0 Jul 14 23:09:19.673363 kernel: ... event mask: 000000000000000f Jul 14 23:09:19.673369 kernel: signal: max sigframe size: 1776 Jul 14 23:09:19.673376 kernel: rcu: Hierarchical SRCU implementation. Jul 14 23:09:19.673382 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Jul 14 23:09:19.673387 kernel: smp: Bringing up secondary CPUs ... Jul 14 23:09:19.673393 kernel: x86: Booting SMP configuration: Jul 14 23:09:19.673399 kernel: .... node #0, CPUs: #1 Jul 14 23:09:19.673404 kernel: Disabled fast string operations Jul 14 23:09:19.673409 kernel: smpboot: CPU 1 Converting physical 2 to logical package 1 Jul 14 23:09:19.673415 kernel: smpboot: CPU 1 Converting physical 0 to logical die 1 Jul 14 23:09:19.673421 kernel: smp: Brought up 1 node, 2 CPUs Jul 14 23:09:19.673427 kernel: smpboot: Max logical packages: 128 Jul 14 23:09:19.673433 kernel: smpboot: Total of 2 processors activated (13632.00 BogoMIPS) Jul 14 23:09:19.673439 kernel: devtmpfs: initialized Jul 14 23:09:19.673444 kernel: x86/mm: Memory block size: 128MB Jul 14 23:09:19.673450 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7feff000-0x7fefffff] (4096 bytes) Jul 14 23:09:19.673455 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 14 23:09:19.673461 kernel: futex hash table entries: 32768 (order: 9, 2097152 bytes, linear) Jul 14 23:09:19.673467 kernel: pinctrl core: initialized pinctrl subsystem Jul 14 23:09:19.673472 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 14 23:09:19.673479 kernel: audit: initializing netlink subsys (disabled) Jul 14 23:09:19.673485 kernel: audit: type=2000 audit(1752534558.093:1): state=initialized audit_enabled=0 res=1 Jul 14 23:09:19.673490 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 14 23:09:19.673496 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 14 23:09:19.673501 kernel: cpuidle: using governor menu Jul 14 23:09:19.673507 kernel: Simple Boot Flag at 0x36 set to 0x80 Jul 14 23:09:19.673512 kernel: ACPI: bus type PCI registered Jul 14 23:09:19.673518 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 14 23:09:19.673524 kernel: dca service started, version 1.12.1 Jul 14 23:09:19.673529 kernel: PCI: MMCONFIG for domain 0000 [bus 00-7f] at [mem 0xf0000000-0xf7ffffff] (base 0xf0000000) Jul 14 23:09:19.673536 kernel: PCI: MMCONFIG at [mem 0xf0000000-0xf7ffffff] reserved in E820 Jul 14 23:09:19.673542 kernel: PCI: Using configuration type 1 for base access Jul 14 23:09:19.673547 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 14 23:09:19.673553 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 14 23:09:19.673559 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 14 23:09:19.673564 kernel: ACPI: Added _OSI(Module Device) Jul 14 23:09:19.673570 kernel: ACPI: Added _OSI(Processor Device) Jul 14 23:09:19.673575 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 14 23:09:19.673582 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 14 23:09:19.673588 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 14 23:09:19.673594 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 14 23:09:19.673599 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 14 23:09:19.673605 kernel: ACPI: [Firmware Bug]: BIOS _OSI(Linux) query ignored Jul 14 23:09:19.673610 kernel: ACPI: Interpreter enabled Jul 14 23:09:19.673616 kernel: ACPI: PM: (supports S0 S1 S5) Jul 14 23:09:19.673621 kernel: ACPI: Using IOAPIC for interrupt routing Jul 14 23:09:19.673627 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 14 23:09:19.673634 kernel: ACPI: Enabled 4 GPEs in block 00 to 0F Jul 14 23:09:19.673640 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-7f]) Jul 14 23:09:19.673716 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 14 23:09:19.673769 kernel: acpi PNP0A03:00: _OSC: platform does not support [AER LTR] Jul 14 23:09:19.673818 kernel: acpi PNP0A03:00: _OSC: OS now controls [PCIeHotplug PME PCIeCapability] Jul 14 23:09:19.673826 kernel: PCI host bridge to bus 0000:00 Jul 14 23:09:19.673875 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 14 23:09:19.673922 kernel: pci_bus 0000:00: root bus resource [mem 0x000cc000-0x000dbfff window] Jul 14 23:09:19.673965 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 14 23:09:19.674008 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 14 23:09:19.674052 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xfeff window] Jul 14 23:09:19.687248 kernel: pci_bus 0000:00: root bus resource [bus 00-7f] Jul 14 23:09:19.687332 kernel: pci 0000:00:00.0: [8086:7190] type 00 class 0x060000 Jul 14 23:09:19.687391 kernel: pci 0000:00:01.0: [8086:7191] type 01 class 0x060400 Jul 14 23:09:19.687453 kernel: pci 0000:00:07.0: [8086:7110] type 00 class 0x060100 Jul 14 23:09:19.687509 kernel: pci 0000:00:07.1: [8086:7111] type 00 class 0x01018a Jul 14 23:09:19.687558 kernel: pci 0000:00:07.1: reg 0x20: [io 0x1060-0x106f] Jul 14 23:09:19.687607 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Jul 14 23:09:19.687656 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Jul 14 23:09:19.687705 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Jul 14 23:09:19.687757 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Jul 14 23:09:19.687811 kernel: pci 0000:00:07.3: [8086:7113] type 00 class 0x068000 Jul 14 23:09:19.687861 kernel: pci 0000:00:07.3: quirk: [io 0x1000-0x103f] claimed by PIIX4 ACPI Jul 14 23:09:19.687910 kernel: pci 0000:00:07.3: quirk: [io 0x1040-0x104f] claimed by PIIX4 SMB Jul 14 23:09:19.687966 kernel: pci 0000:00:07.7: [15ad:0740] type 00 class 0x088000 Jul 14 23:09:19.688016 kernel: pci 0000:00:07.7: reg 0x10: [io 0x1080-0x10bf] Jul 14 23:09:19.688066 kernel: pci 0000:00:07.7: reg 0x14: [mem 0xfebfe000-0xfebfffff 64bit] Jul 14 23:09:19.688134 kernel: pci 0000:00:0f.0: [15ad:0405] type 00 class 0x030000 Jul 14 23:09:19.688184 kernel: pci 0000:00:0f.0: reg 0x10: [io 0x1070-0x107f] Jul 14 23:09:19.688233 kernel: pci 0000:00:0f.0: reg 0x14: [mem 0xe8000000-0xefffffff pref] Jul 14 23:09:19.688282 kernel: pci 0000:00:0f.0: reg 0x18: [mem 0xfe000000-0xfe7fffff] Jul 14 23:09:19.688331 kernel: pci 0000:00:0f.0: reg 0x30: [mem 0x00000000-0x00007fff pref] Jul 14 23:09:19.688380 kernel: pci 0000:00:0f.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 14 23:09:19.688437 kernel: pci 0000:00:11.0: [15ad:0790] type 01 class 0x060401 Jul 14 23:09:19.688490 kernel: pci 0000:00:15.0: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.688540 kernel: pci 0000:00:15.0: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.688594 kernel: pci 0000:00:15.1: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.688646 kernel: pci 0000:00:15.1: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.688701 kernel: pci 0000:00:15.2: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.688754 kernel: pci 0000:00:15.2: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.688807 kernel: pci 0000:00:15.3: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.688858 kernel: pci 0000:00:15.3: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.688911 kernel: pci 0000:00:15.4: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.688962 kernel: pci 0000:00:15.4: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.689018 kernel: pci 0000:00:15.5: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.689117 kernel: pci 0000:00:15.5: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.689177 kernel: pci 0000:00:15.6: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.689227 kernel: pci 0000:00:15.6: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.689280 kernel: pci 0000:00:15.7: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.689330 kernel: pci 0000:00:15.7: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.689382 kernel: pci 0000:00:16.0: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.689431 kernel: pci 0000:00:16.0: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.689487 kernel: pci 0000:00:16.1: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.689536 kernel: pci 0000:00:16.1: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.689590 kernel: pci 0000:00:16.2: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.689639 kernel: pci 0000:00:16.2: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.689692 kernel: pci 0000:00:16.3: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.689744 kernel: pci 0000:00:16.3: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.689799 kernel: pci 0000:00:16.4: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.689849 kernel: pci 0000:00:16.4: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.689905 kernel: pci 0000:00:16.5: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.689955 kernel: pci 0000:00:16.5: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.690007 kernel: pci 0000:00:16.6: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.690060 kernel: pci 0000:00:16.6: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.690131 kernel: pci 0000:00:16.7: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.690182 kernel: pci 0000:00:16.7: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.690234 kernel: pci 0000:00:17.0: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.690284 kernel: pci 0000:00:17.0: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.690336 kernel: pci 0000:00:17.1: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.690385 kernel: pci 0000:00:17.1: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.690440 kernel: pci 0000:00:17.2: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.690490 kernel: pci 0000:00:17.2: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.690543 kernel: pci 0000:00:17.3: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.690592 kernel: pci 0000:00:17.3: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.690645 kernel: pci 0000:00:17.4: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.690695 kernel: pci 0000:00:17.4: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.690751 kernel: pci 0000:00:17.5: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.690801 kernel: pci 0000:00:17.5: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.690856 kernel: pci 0000:00:17.6: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.690905 kernel: pci 0000:00:17.6: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.690959 kernel: pci 0000:00:17.7: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.691009 kernel: pci 0000:00:17.7: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.691064 kernel: pci 0000:00:18.0: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.691289 kernel: pci 0000:00:18.0: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.691345 kernel: pci 0000:00:18.1: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.691394 kernel: pci 0000:00:18.1: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.691446 kernel: pci 0000:00:18.2: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.691495 kernel: pci 0000:00:18.2: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.691551 kernel: pci 0000:00:18.3: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.691600 kernel: pci 0000:00:18.3: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.691652 kernel: pci 0000:00:18.4: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.691700 kernel: pci 0000:00:18.4: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.691752 kernel: pci 0000:00:18.5: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.691801 kernel: pci 0000:00:18.5: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.691856 kernel: pci 0000:00:18.6: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.691908 kernel: pci 0000:00:18.6: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.691961 kernel: pci 0000:00:18.7: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.692011 kernel: pci 0000:00:18.7: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.692082 kernel: pci_bus 0000:01: extended config space not accessible Jul 14 23:09:19.692313 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 14 23:09:19.692377 kernel: pci_bus 0000:02: extended config space not accessible Jul 14 23:09:19.692389 kernel: acpiphp: Slot [32] registered Jul 14 23:09:19.692395 kernel: acpiphp: Slot [33] registered Jul 14 23:09:19.692401 kernel: acpiphp: Slot [34] registered Jul 14 23:09:19.692406 kernel: acpiphp: Slot [35] registered Jul 14 23:09:19.692412 kernel: acpiphp: Slot [36] registered Jul 14 23:09:19.692418 kernel: acpiphp: Slot [37] registered Jul 14 23:09:19.692423 kernel: acpiphp: Slot [38] registered Jul 14 23:09:19.692429 kernel: acpiphp: Slot [39] registered Jul 14 23:09:19.692435 kernel: acpiphp: Slot [40] registered Jul 14 23:09:19.692442 kernel: acpiphp: Slot [41] registered Jul 14 23:09:19.692447 kernel: acpiphp: Slot [42] registered Jul 14 23:09:19.692453 kernel: acpiphp: Slot [43] registered Jul 14 23:09:19.692459 kernel: acpiphp: Slot [44] registered Jul 14 23:09:19.692465 kernel: acpiphp: Slot [45] registered Jul 14 23:09:19.692470 kernel: acpiphp: Slot [46] registered Jul 14 23:09:19.692476 kernel: acpiphp: Slot [47] registered Jul 14 23:09:19.692482 kernel: acpiphp: Slot [48] registered Jul 14 23:09:19.692487 kernel: acpiphp: Slot [49] registered Jul 14 23:09:19.692494 kernel: acpiphp: Slot [50] registered Jul 14 23:09:19.692500 kernel: acpiphp: Slot [51] registered Jul 14 23:09:19.692506 kernel: acpiphp: Slot [52] registered Jul 14 23:09:19.692511 kernel: acpiphp: Slot [53] registered Jul 14 23:09:19.692517 kernel: acpiphp: Slot [54] registered Jul 14 23:09:19.692523 kernel: acpiphp: Slot [55] registered Jul 14 23:09:19.692529 kernel: acpiphp: Slot [56] registered Jul 14 23:09:19.692534 kernel: acpiphp: Slot [57] registered Jul 14 23:09:19.692540 kernel: acpiphp: Slot [58] registered Jul 14 23:09:19.692546 kernel: acpiphp: Slot [59] registered Jul 14 23:09:19.692552 kernel: acpiphp: Slot [60] registered Jul 14 23:09:19.692558 kernel: acpiphp: Slot [61] registered Jul 14 23:09:19.692564 kernel: acpiphp: Slot [62] registered Jul 14 23:09:19.692569 kernel: acpiphp: Slot [63] registered Jul 14 23:09:19.692624 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] (subtractive decode) Jul 14 23:09:19.692679 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 14 23:09:19.692733 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 14 23:09:19.692786 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 14 23:09:19.692841 kernel: pci 0000:00:11.0: bridge window [mem 0x000a0000-0x000bffff window] (subtractive decode) Jul 14 23:09:19.692894 kernel: pci 0000:00:11.0: bridge window [mem 0x000cc000-0x000dbfff window] (subtractive decode) Jul 14 23:09:19.692946 kernel: pci 0000:00:11.0: bridge window [mem 0xc0000000-0xfebfffff window] (subtractive decode) Jul 14 23:09:19.693019 kernel: pci 0000:00:11.0: bridge window [io 0x0000-0x0cf7 window] (subtractive decode) Jul 14 23:09:19.698641 kernel: pci 0000:00:11.0: bridge window [io 0x0d00-0xfeff window] (subtractive decode) Jul 14 23:09:19.698725 kernel: pci 0000:03:00.0: [15ad:07c0] type 00 class 0x010700 Jul 14 23:09:19.698782 kernel: pci 0000:03:00.0: reg 0x10: [io 0x4000-0x4007] Jul 14 23:09:19.698838 kernel: pci 0000:03:00.0: reg 0x14: [mem 0xfd5f8000-0xfd5fffff 64bit] Jul 14 23:09:19.698889 kernel: pci 0000:03:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 14 23:09:19.698939 kernel: pci 0000:03:00.0: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.698989 kernel: pci 0000:03:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 14 23:09:19.699041 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 14 23:09:19.699108 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 14 23:09:19.699157 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 14 23:09:19.699207 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 14 23:09:19.699259 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 14 23:09:19.699308 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 14 23:09:19.699646 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 14 23:09:19.699706 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 14 23:09:19.699756 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 14 23:09:19.699806 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 14 23:09:19.699853 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 14 23:09:19.699907 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 14 23:09:19.699957 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 14 23:09:19.700005 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 14 23:09:19.700055 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 14 23:09:19.700112 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 14 23:09:19.700166 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 14 23:09:19.700219 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 14 23:09:19.700270 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 14 23:09:19.700318 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 14 23:09:19.700368 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 14 23:09:19.700416 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 14 23:09:19.700464 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 14 23:09:19.700514 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 14 23:09:19.700565 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 14 23:09:19.700613 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 14 23:09:19.700670 kernel: pci 0000:0b:00.0: [15ad:07b0] type 00 class 0x020000 Jul 14 23:09:19.700721 kernel: pci 0000:0b:00.0: reg 0x10: [mem 0xfd4fc000-0xfd4fcfff] Jul 14 23:09:19.701158 kernel: pci 0000:0b:00.0: reg 0x14: [mem 0xfd4fd000-0xfd4fdfff] Jul 14 23:09:19.701221 kernel: pci 0000:0b:00.0: reg 0x18: [mem 0xfd4fe000-0xfd4fffff] Jul 14 23:09:19.701279 kernel: pci 0000:0b:00.0: reg 0x1c: [io 0x5000-0x500f] Jul 14 23:09:19.701337 kernel: pci 0000:0b:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 14 23:09:19.701388 kernel: pci 0000:0b:00.0: supports D1 D2 Jul 14 23:09:19.701438 kernel: pci 0000:0b:00.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 14 23:09:19.701489 kernel: pci 0000:0b:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 14 23:09:19.701540 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 14 23:09:19.701589 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 14 23:09:19.701638 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 14 23:09:19.701689 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 14 23:09:19.701741 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 14 23:09:19.701789 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 14 23:09:19.701838 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 14 23:09:19.701889 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 14 23:09:19.701939 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 14 23:09:19.701985 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 14 23:09:19.702034 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 14 23:09:19.702092 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 14 23:09:19.702144 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 14 23:09:19.702193 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 14 23:09:19.702242 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 14 23:09:19.702291 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 14 23:09:19.702340 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 14 23:09:19.702390 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 14 23:09:19.702439 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 14 23:09:19.702488 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 14 23:09:19.702542 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 14 23:09:19.702592 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 14 23:09:19.702640 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 14 23:09:19.702690 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 14 23:09:19.702738 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 14 23:09:19.702785 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 14 23:09:19.702834 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 14 23:09:19.703305 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 14 23:09:19.703378 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 14 23:09:19.703430 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 14 23:09:19.703482 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 14 23:09:19.703531 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 14 23:09:19.703580 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 14 23:09:19.703628 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 14 23:09:19.703678 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 14 23:09:19.703730 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 14 23:09:19.703779 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 14 23:09:19.703827 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 14 23:09:19.703878 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 14 23:09:19.703927 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 14 23:09:19.703975 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 14 23:09:19.704024 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 14 23:09:19.704079 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 14 23:09:19.704132 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 14 23:09:19.704183 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 14 23:09:19.704231 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 14 23:09:19.704279 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 14 23:09:19.704329 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 14 23:09:19.704377 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 14 23:09:19.704425 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 14 23:09:19.704476 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 14 23:09:19.704526 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 14 23:09:19.704575 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 14 23:09:19.704624 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 14 23:09:19.704672 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 14 23:09:19.704720 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 14 23:09:19.704767 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 14 23:09:19.704817 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 14 23:09:19.704865 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 14 23:09:19.704915 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 14 23:09:19.704963 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 14 23:09:19.705014 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 14 23:09:19.705066 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 14 23:09:19.705445 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 14 23:09:19.705501 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 14 23:09:19.705551 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 14 23:09:19.705604 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 14 23:09:19.705655 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 14 23:09:19.705703 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 14 23:09:19.705751 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 14 23:09:19.705802 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 14 23:09:19.705851 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 14 23:09:19.705900 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 14 23:09:19.708392 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 14 23:09:19.708492 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 14 23:09:19.708546 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 14 23:09:19.708610 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 14 23:09:19.708663 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 14 23:09:19.708718 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 14 23:09:19.708727 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 9 Jul 14 23:09:19.708733 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 0 Jul 14 23:09:19.708739 kernel: ACPI: PCI: Interrupt link LNKB disabled Jul 14 23:09:19.708745 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 14 23:09:19.708753 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 10 Jul 14 23:09:19.708758 kernel: iommu: Default domain type: Translated Jul 14 23:09:19.708764 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 14 23:09:19.708814 kernel: pci 0000:00:0f.0: vgaarb: setting as boot VGA device Jul 14 23:09:19.708863 kernel: pci 0000:00:0f.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 14 23:09:19.708911 kernel: pci 0000:00:0f.0: vgaarb: bridge control possible Jul 14 23:09:19.708919 kernel: vgaarb: loaded Jul 14 23:09:19.708925 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 14 23:09:19.708931 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 14 23:09:19.708939 kernel: PTP clock support registered Jul 14 23:09:19.708945 kernel: PCI: Using ACPI for IRQ routing Jul 14 23:09:19.708951 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 14 23:09:19.708957 kernel: e820: reserve RAM buffer [mem 0x0009ec00-0x0009ffff] Jul 14 23:09:19.708963 kernel: e820: reserve RAM buffer [mem 0x7fee0000-0x7fffffff] Jul 14 23:09:19.708969 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 Jul 14 23:09:19.708975 kernel: hpet0: 16 comparators, 64-bit 14.318180 MHz counter Jul 14 23:09:19.708981 kernel: clocksource: Switched to clocksource tsc-early Jul 14 23:09:19.708987 kernel: VFS: Disk quotas dquot_6.6.0 Jul 14 23:09:19.708994 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 14 23:09:19.709000 kernel: pnp: PnP ACPI init Jul 14 23:09:19.709056 kernel: system 00:00: [io 0x1000-0x103f] has been reserved Jul 14 23:09:19.710478 kernel: system 00:00: [io 0x1040-0x104f] has been reserved Jul 14 23:09:19.710535 kernel: system 00:00: [io 0x0cf0-0x0cf1] has been reserved Jul 14 23:09:19.710588 kernel: system 00:04: [mem 0xfed00000-0xfed003ff] has been reserved Jul 14 23:09:19.710641 kernel: pnp 00:06: [dma 2] Jul 14 23:09:19.710694 kernel: system 00:07: [io 0xfce0-0xfcff] has been reserved Jul 14 23:09:19.710739 kernel: system 00:07: [mem 0xf0000000-0xf7ffffff] has been reserved Jul 14 23:09:19.710783 kernel: system 00:07: [mem 0xfe800000-0xfe9fffff] has been reserved Jul 14 23:09:19.710791 kernel: pnp: PnP ACPI: found 8 devices Jul 14 23:09:19.710797 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 14 23:09:19.710803 kernel: NET: Registered PF_INET protocol family Jul 14 23:09:19.710809 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 14 23:09:19.710817 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Jul 14 23:09:19.710823 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 14 23:09:19.710829 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Jul 14 23:09:19.710835 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Jul 14 23:09:19.710841 kernel: TCP: Hash tables configured (established 16384 bind 16384) Jul 14 23:09:19.710847 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 14 23:09:19.710853 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 14 23:09:19.710859 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 14 23:09:19.710865 kernel: NET: Registered PF_XDP protocol family Jul 14 23:09:19.710919 kernel: pci 0000:00:15.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 03] add_size 200000 add_align 100000 Jul 14 23:09:19.710973 kernel: pci 0000:00:15.3: bridge window [io 0x1000-0x0fff] to [bus 06] add_size 1000 Jul 14 23:09:19.711025 kernel: pci 0000:00:15.4: bridge window [io 0x1000-0x0fff] to [bus 07] add_size 1000 Jul 14 23:09:19.713397 kernel: pci 0000:00:15.5: bridge window [io 0x1000-0x0fff] to [bus 08] add_size 1000 Jul 14 23:09:19.713503 kernel: pci 0000:00:15.6: bridge window [io 0x1000-0x0fff] to [bus 09] add_size 1000 Jul 14 23:09:19.713563 kernel: pci 0000:00:15.7: bridge window [io 0x1000-0x0fff] to [bus 0a] add_size 1000 Jul 14 23:09:19.713621 kernel: pci 0000:00:16.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0b] add_size 200000 add_align 100000 Jul 14 23:09:19.713673 kernel: pci 0000:00:16.3: bridge window [io 0x1000-0x0fff] to [bus 0e] add_size 1000 Jul 14 23:09:19.713725 kernel: pci 0000:00:16.4: bridge window [io 0x1000-0x0fff] to [bus 0f] add_size 1000 Jul 14 23:09:19.713777 kernel: pci 0000:00:16.5: bridge window [io 0x1000-0x0fff] to [bus 10] add_size 1000 Jul 14 23:09:19.713828 kernel: pci 0000:00:16.6: bridge window [io 0x1000-0x0fff] to [bus 11] add_size 1000 Jul 14 23:09:19.713880 kernel: pci 0000:00:16.7: bridge window [io 0x1000-0x0fff] to [bus 12] add_size 1000 Jul 14 23:09:19.713934 kernel: pci 0000:00:17.3: bridge window [io 0x1000-0x0fff] to [bus 16] add_size 1000 Jul 14 23:09:19.713985 kernel: pci 0000:00:17.4: bridge window [io 0x1000-0x0fff] to [bus 17] add_size 1000 Jul 14 23:09:19.714035 kernel: pci 0000:00:17.5: bridge window [io 0x1000-0x0fff] to [bus 18] add_size 1000 Jul 14 23:09:19.714093 kernel: pci 0000:00:17.6: bridge window [io 0x1000-0x0fff] to [bus 19] add_size 1000 Jul 14 23:09:19.714144 kernel: pci 0000:00:17.7: bridge window [io 0x1000-0x0fff] to [bus 1a] add_size 1000 Jul 14 23:09:19.714196 kernel: pci 0000:00:18.2: bridge window [io 0x1000-0x0fff] to [bus 1d] add_size 1000 Jul 14 23:09:19.714249 kernel: pci 0000:00:18.3: bridge window [io 0x1000-0x0fff] to [bus 1e] add_size 1000 Jul 14 23:09:19.714300 kernel: pci 0000:00:18.4: bridge window [io 0x1000-0x0fff] to [bus 1f] add_size 1000 Jul 14 23:09:19.714351 kernel: pci 0000:00:18.5: bridge window [io 0x1000-0x0fff] to [bus 20] add_size 1000 Jul 14 23:09:19.714402 kernel: pci 0000:00:18.6: bridge window [io 0x1000-0x0fff] to [bus 21] add_size 1000 Jul 14 23:09:19.714452 kernel: pci 0000:00:18.7: bridge window [io 0x1000-0x0fff] to [bus 22] add_size 1000 Jul 14 23:09:19.714506 kernel: pci 0000:00:15.0: BAR 15: assigned [mem 0xc0000000-0xc01fffff 64bit pref] Jul 14 23:09:19.714555 kernel: pci 0000:00:16.0: BAR 15: assigned [mem 0xc0200000-0xc03fffff 64bit pref] Jul 14 23:09:19.714606 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.714657 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.714710 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.714759 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.714810 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.714860 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.714925 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.714975 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.715024 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.715083 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.715136 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.715185 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.715236 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.715286 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.715342 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.715391 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.715441 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.715492 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.715542 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.715592 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.715643 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.715692 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.715744 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.715792 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.715841 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.716234 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.716293 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.716345 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.716395 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.716456 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.716510 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.716559 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.716608 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.716655 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.716705 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.716753 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.716804 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.716852 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.716907 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.716956 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.717006 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.717059 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.717375 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.717433 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.717484 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.717540 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.717592 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.717646 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.717696 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.717744 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.717794 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.717843 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.717893 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.717941 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.717989 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.718038 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.718557 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.718622 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.718674 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.718725 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.718775 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.718823 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.718873 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.718921 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.718970 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.719017 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.719069 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.719436 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.719490 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.719541 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.719884 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.719941 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.719994 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.720043 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.720428 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.720485 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.720540 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.720589 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.720640 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.720688 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.720738 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.720786 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.720837 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.720885 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.720936 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 14 23:09:19.720988 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] Jul 14 23:09:19.721037 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 14 23:09:19.721391 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 14 23:09:19.721450 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 14 23:09:19.721507 kernel: pci 0000:03:00.0: BAR 6: assigned [mem 0xfd500000-0xfd50ffff pref] Jul 14 23:09:19.721560 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 14 23:09:19.721809 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 14 23:09:19.721862 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 14 23:09:19.721915 kernel: pci 0000:00:15.0: bridge window [mem 0xc0000000-0xc01fffff 64bit pref] Jul 14 23:09:19.721966 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 14 23:09:19.722014 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 14 23:09:19.722063 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 14 23:09:19.722439 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 14 23:09:19.722494 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 14 23:09:19.722550 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 14 23:09:19.722600 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 14 23:09:19.722649 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 14 23:09:19.722697 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 14 23:09:19.722748 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 14 23:09:19.722796 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 14 23:09:19.722844 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 14 23:09:19.722893 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 14 23:09:19.722940 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 14 23:09:19.722994 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 14 23:09:19.723042 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 14 23:09:19.723221 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 14 23:09:19.723275 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 14 23:09:19.723324 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 14 23:09:19.723371 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 14 23:09:19.723421 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 14 23:09:19.723469 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 14 23:09:19.723518 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 14 23:09:19.723570 kernel: pci 0000:0b:00.0: BAR 6: assigned [mem 0xfd400000-0xfd40ffff pref] Jul 14 23:09:19.723624 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 14 23:09:19.723673 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 14 23:09:19.723721 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 14 23:09:19.723768 kernel: pci 0000:00:16.0: bridge window [mem 0xc0200000-0xc03fffff 64bit pref] Jul 14 23:09:19.723818 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 14 23:09:19.723867 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 14 23:09:19.723915 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 14 23:09:19.723963 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 14 23:09:19.724013 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 14 23:09:19.724063 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 14 23:09:19.724153 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 14 23:09:19.724201 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 14 23:09:19.724250 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 14 23:09:19.724298 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 14 23:09:19.724345 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 14 23:09:19.724394 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 14 23:09:19.724442 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 14 23:09:19.724490 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 14 23:09:19.724539 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 14 23:09:19.724589 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 14 23:09:19.724638 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 14 23:09:19.724687 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 14 23:09:19.724735 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 14 23:09:19.724782 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 14 23:09:19.724831 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 14 23:09:19.724879 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 14 23:09:19.724927 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 14 23:09:19.724976 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 14 23:09:19.725026 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 14 23:09:19.725370 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 14 23:09:19.725440 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 14 23:09:19.725494 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 14 23:09:19.725544 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 14 23:09:19.725594 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 14 23:09:19.725643 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 14 23:09:19.725692 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 14 23:09:19.725741 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 14 23:09:19.725869 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 14 23:09:19.725994 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 14 23:09:19.726167 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 14 23:09:19.726221 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 14 23:09:19.726295 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 14 23:09:19.726351 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 14 23:09:19.726606 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 14 23:09:19.726657 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 14 23:09:19.726707 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 14 23:09:19.726755 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 14 23:09:19.727160 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 14 23:09:19.727217 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 14 23:09:19.727267 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 14 23:09:19.727471 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 14 23:09:19.727529 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 14 23:09:19.727579 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 14 23:09:19.727960 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 14 23:09:19.728036 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 14 23:09:19.728097 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 14 23:09:19.728151 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 14 23:09:19.728200 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 14 23:09:19.728251 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 14 23:09:19.728300 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 14 23:09:19.728349 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 14 23:09:19.728397 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 14 23:09:19.728447 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 14 23:09:19.728503 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 14 23:09:19.728594 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 14 23:09:19.728655 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 14 23:09:19.728721 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 14 23:09:19.728772 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 14 23:09:19.728957 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 14 23:09:19.729009 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 14 23:09:19.729065 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 14 23:09:19.729436 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 14 23:09:19.729490 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 14 23:09:19.729539 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 14 23:09:19.729590 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 14 23:09:19.729642 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 14 23:09:19.729691 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 14 23:09:19.729743 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 14 23:09:19.729792 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 14 23:09:19.729840 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 14 23:09:19.729892 kernel: pci_bus 0000:00: resource 4 [mem 0x000a0000-0x000bffff window] Jul 14 23:09:19.729937 kernel: pci_bus 0000:00: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 14 23:09:19.729982 kernel: pci_bus 0000:00: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 14 23:09:19.730025 kernel: pci_bus 0000:00: resource 7 [io 0x0000-0x0cf7 window] Jul 14 23:09:19.730070 kernel: pci_bus 0000:00: resource 8 [io 0x0d00-0xfeff window] Jul 14 23:09:19.730135 kernel: pci_bus 0000:02: resource 0 [io 0x2000-0x3fff] Jul 14 23:09:19.730182 kernel: pci_bus 0000:02: resource 1 [mem 0xfd600000-0xfdffffff] Jul 14 23:09:19.730228 kernel: pci_bus 0000:02: resource 2 [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 14 23:09:19.730274 kernel: pci_bus 0000:02: resource 4 [mem 0x000a0000-0x000bffff window] Jul 14 23:09:19.730319 kernel: pci_bus 0000:02: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 14 23:09:19.730364 kernel: pci_bus 0000:02: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 14 23:09:19.730412 kernel: pci_bus 0000:02: resource 7 [io 0x0000-0x0cf7 window] Jul 14 23:09:19.730457 kernel: pci_bus 0000:02: resource 8 [io 0x0d00-0xfeff window] Jul 14 23:09:19.730508 kernel: pci_bus 0000:03: resource 0 [io 0x4000-0x4fff] Jul 14 23:09:19.730555 kernel: pci_bus 0000:03: resource 1 [mem 0xfd500000-0xfd5fffff] Jul 14 23:09:19.730600 kernel: pci_bus 0000:03: resource 2 [mem 0xc0000000-0xc01fffff 64bit pref] Jul 14 23:09:19.730650 kernel: pci_bus 0000:04: resource 0 [io 0x8000-0x8fff] Jul 14 23:09:19.730697 kernel: pci_bus 0000:04: resource 1 [mem 0xfd100000-0xfd1fffff] Jul 14 23:09:19.730750 kernel: pci_bus 0000:04: resource 2 [mem 0xe7800000-0xe78fffff 64bit pref] Jul 14 23:09:19.730814 kernel: pci_bus 0000:05: resource 0 [io 0xc000-0xcfff] Jul 14 23:09:19.730861 kernel: pci_bus 0000:05: resource 1 [mem 0xfcd00000-0xfcdfffff] Jul 14 23:09:19.730907 kernel: pci_bus 0000:05: resource 2 [mem 0xe7400000-0xe74fffff 64bit pref] Jul 14 23:09:19.730957 kernel: pci_bus 0000:06: resource 1 [mem 0xfc900000-0xfc9fffff] Jul 14 23:09:19.731003 kernel: pci_bus 0000:06: resource 2 [mem 0xe7000000-0xe70fffff 64bit pref] Jul 14 23:09:19.731057 kernel: pci_bus 0000:07: resource 1 [mem 0xfc500000-0xfc5fffff] Jul 14 23:09:19.731153 kernel: pci_bus 0000:07: resource 2 [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 14 23:09:19.731204 kernel: pci_bus 0000:08: resource 1 [mem 0xfc100000-0xfc1fffff] Jul 14 23:09:19.731249 kernel: pci_bus 0000:08: resource 2 [mem 0xe6800000-0xe68fffff 64bit pref] Jul 14 23:09:19.731298 kernel: pci_bus 0000:09: resource 1 [mem 0xfbd00000-0xfbdfffff] Jul 14 23:09:19.731344 kernel: pci_bus 0000:09: resource 2 [mem 0xe6400000-0xe64fffff 64bit pref] Jul 14 23:09:19.731393 kernel: pci_bus 0000:0a: resource 1 [mem 0xfb900000-0xfb9fffff] Jul 14 23:09:19.731454 kernel: pci_bus 0000:0a: resource 2 [mem 0xe6000000-0xe60fffff 64bit pref] Jul 14 23:09:19.731506 kernel: pci_bus 0000:0b: resource 0 [io 0x5000-0x5fff] Jul 14 23:09:19.731551 kernel: pci_bus 0000:0b: resource 1 [mem 0xfd400000-0xfd4fffff] Jul 14 23:09:19.731596 kernel: pci_bus 0000:0b: resource 2 [mem 0xc0200000-0xc03fffff 64bit pref] Jul 14 23:09:19.731649 kernel: pci_bus 0000:0c: resource 0 [io 0x9000-0x9fff] Jul 14 23:09:19.731694 kernel: pci_bus 0000:0c: resource 1 [mem 0xfd000000-0xfd0fffff] Jul 14 23:09:19.731743 kernel: pci_bus 0000:0c: resource 2 [mem 0xe7700000-0xe77fffff 64bit pref] Jul 14 23:09:19.731800 kernel: pci_bus 0000:0d: resource 0 [io 0xd000-0xdfff] Jul 14 23:09:19.731865 kernel: pci_bus 0000:0d: resource 1 [mem 0xfcc00000-0xfccfffff] Jul 14 23:09:19.731921 kernel: pci_bus 0000:0d: resource 2 [mem 0xe7300000-0xe73fffff 64bit pref] Jul 14 23:09:19.731974 kernel: pci_bus 0000:0e: resource 1 [mem 0xfc800000-0xfc8fffff] Jul 14 23:09:19.732019 kernel: pci_bus 0000:0e: resource 2 [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 14 23:09:19.732093 kernel: pci_bus 0000:0f: resource 1 [mem 0xfc400000-0xfc4fffff] Jul 14 23:09:19.732145 kernel: pci_bus 0000:0f: resource 2 [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 14 23:09:19.732195 kernel: pci_bus 0000:10: resource 1 [mem 0xfc000000-0xfc0fffff] Jul 14 23:09:19.732243 kernel: pci_bus 0000:10: resource 2 [mem 0xe6700000-0xe67fffff 64bit pref] Jul 14 23:09:19.732294 kernel: pci_bus 0000:11: resource 1 [mem 0xfbc00000-0xfbcfffff] Jul 14 23:09:19.732339 kernel: pci_bus 0000:11: resource 2 [mem 0xe6300000-0xe63fffff 64bit pref] Jul 14 23:09:19.732388 kernel: pci_bus 0000:12: resource 1 [mem 0xfb800000-0xfb8fffff] Jul 14 23:09:19.732436 kernel: pci_bus 0000:12: resource 2 [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 14 23:09:19.732487 kernel: pci_bus 0000:13: resource 0 [io 0x6000-0x6fff] Jul 14 23:09:19.732533 kernel: pci_bus 0000:13: resource 1 [mem 0xfd300000-0xfd3fffff] Jul 14 23:09:19.732578 kernel: pci_bus 0000:13: resource 2 [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 14 23:09:19.732630 kernel: pci_bus 0000:14: resource 0 [io 0xa000-0xafff] Jul 14 23:09:19.732677 kernel: pci_bus 0000:14: resource 1 [mem 0xfcf00000-0xfcffffff] Jul 14 23:09:19.732724 kernel: pci_bus 0000:14: resource 2 [mem 0xe7600000-0xe76fffff 64bit pref] Jul 14 23:09:19.732773 kernel: pci_bus 0000:15: resource 0 [io 0xe000-0xefff] Jul 14 23:09:19.732820 kernel: pci_bus 0000:15: resource 1 [mem 0xfcb00000-0xfcbfffff] Jul 14 23:09:19.732865 kernel: pci_bus 0000:15: resource 2 [mem 0xe7200000-0xe72fffff 64bit pref] Jul 14 23:09:19.732915 kernel: pci_bus 0000:16: resource 1 [mem 0xfc700000-0xfc7fffff] Jul 14 23:09:19.732961 kernel: pci_bus 0000:16: resource 2 [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 14 23:09:19.733011 kernel: pci_bus 0000:17: resource 1 [mem 0xfc300000-0xfc3fffff] Jul 14 23:09:19.733115 kernel: pci_bus 0000:17: resource 2 [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 14 23:09:19.733177 kernel: pci_bus 0000:18: resource 1 [mem 0xfbf00000-0xfbffffff] Jul 14 23:09:19.733223 kernel: pci_bus 0000:18: resource 2 [mem 0xe6600000-0xe66fffff 64bit pref] Jul 14 23:09:19.733273 kernel: pci_bus 0000:19: resource 1 [mem 0xfbb00000-0xfbbfffff] Jul 14 23:09:19.733319 kernel: pci_bus 0000:19: resource 2 [mem 0xe6200000-0xe62fffff 64bit pref] Jul 14 23:09:19.733624 kernel: pci_bus 0000:1a: resource 1 [mem 0xfb700000-0xfb7fffff] Jul 14 23:09:19.733681 kernel: pci_bus 0000:1a: resource 2 [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 14 23:09:19.733734 kernel: pci_bus 0000:1b: resource 0 [io 0x7000-0x7fff] Jul 14 23:09:19.733780 kernel: pci_bus 0000:1b: resource 1 [mem 0xfd200000-0xfd2fffff] Jul 14 23:09:19.733826 kernel: pci_bus 0000:1b: resource 2 [mem 0xe7900000-0xe79fffff 64bit pref] Jul 14 23:09:19.733875 kernel: pci_bus 0000:1c: resource 0 [io 0xb000-0xbfff] Jul 14 23:09:19.733921 kernel: pci_bus 0000:1c: resource 1 [mem 0xfce00000-0xfcefffff] Jul 14 23:09:19.733966 kernel: pci_bus 0000:1c: resource 2 [mem 0xe7500000-0xe75fffff 64bit pref] Jul 14 23:09:19.734018 kernel: pci_bus 0000:1d: resource 1 [mem 0xfca00000-0xfcafffff] Jul 14 23:09:19.734064 kernel: pci_bus 0000:1d: resource 2 [mem 0xe7100000-0xe71fffff 64bit pref] Jul 14 23:09:19.734133 kernel: pci_bus 0000:1e: resource 1 [mem 0xfc600000-0xfc6fffff] Jul 14 23:09:19.734179 kernel: pci_bus 0000:1e: resource 2 [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 14 23:09:19.734229 kernel: pci_bus 0000:1f: resource 1 [mem 0xfc200000-0xfc2fffff] Jul 14 23:09:19.734277 kernel: pci_bus 0000:1f: resource 2 [mem 0xe6900000-0xe69fffff 64bit pref] Jul 14 23:09:19.734331 kernel: pci_bus 0000:20: resource 1 [mem 0xfbe00000-0xfbefffff] Jul 14 23:09:19.734377 kernel: pci_bus 0000:20: resource 2 [mem 0xe6500000-0xe65fffff 64bit pref] Jul 14 23:09:19.734426 kernel: pci_bus 0000:21: resource 1 [mem 0xfba00000-0xfbafffff] Jul 14 23:09:19.734473 kernel: pci_bus 0000:21: resource 2 [mem 0xe6100000-0xe61fffff 64bit pref] Jul 14 23:09:19.734524 kernel: pci_bus 0000:22: resource 1 [mem 0xfb600000-0xfb6fffff] Jul 14 23:09:19.734572 kernel: pci_bus 0000:22: resource 2 [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 14 23:09:19.734628 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 14 23:09:19.734638 kernel: PCI: CLS 32 bytes, default 64 Jul 14 23:09:19.734645 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Jul 14 23:09:19.734651 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 14 23:09:19.734657 kernel: clocksource: Switched to clocksource tsc Jul 14 23:09:19.734664 kernel: Initialise system trusted keyrings Jul 14 23:09:19.734670 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Jul 14 23:09:19.734676 kernel: Key type asymmetric registered Jul 14 23:09:19.734684 kernel: Asymmetric key parser 'x509' registered Jul 14 23:09:19.734689 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 14 23:09:19.734696 kernel: io scheduler mq-deadline registered Jul 14 23:09:19.734702 kernel: io scheduler kyber registered Jul 14 23:09:19.734708 kernel: io scheduler bfq registered Jul 14 23:09:19.734759 kernel: pcieport 0000:00:15.0: PME: Signaling with IRQ 24 Jul 14 23:09:19.734834 kernel: pcieport 0000:00:15.0: pciehp: Slot #160 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.735166 kernel: pcieport 0000:00:15.1: PME: Signaling with IRQ 25 Jul 14 23:09:19.735229 kernel: pcieport 0000:00:15.1: pciehp: Slot #161 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.735303 kernel: pcieport 0000:00:15.2: PME: Signaling with IRQ 26 Jul 14 23:09:19.736441 kernel: pcieport 0000:00:15.2: pciehp: Slot #162 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.736504 kernel: pcieport 0000:00:15.3: PME: Signaling with IRQ 27 Jul 14 23:09:19.736557 kernel: pcieport 0000:00:15.3: pciehp: Slot #163 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.736610 kernel: pcieport 0000:00:15.4: PME: Signaling with IRQ 28 Jul 14 23:09:19.736660 kernel: pcieport 0000:00:15.4: pciehp: Slot #164 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.737134 kernel: pcieport 0000:00:15.5: PME: Signaling with IRQ 29 Jul 14 23:09:19.737195 kernel: pcieport 0000:00:15.5: pciehp: Slot #165 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.737249 kernel: pcieport 0000:00:15.6: PME: Signaling with IRQ 30 Jul 14 23:09:19.737300 kernel: pcieport 0000:00:15.6: pciehp: Slot #166 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.737352 kernel: pcieport 0000:00:15.7: PME: Signaling with IRQ 31 Jul 14 23:09:19.737405 kernel: pcieport 0000:00:15.7: pciehp: Slot #167 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.737458 kernel: pcieport 0000:00:16.0: PME: Signaling with IRQ 32 Jul 14 23:09:19.737507 kernel: pcieport 0000:00:16.0: pciehp: Slot #192 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.737558 kernel: pcieport 0000:00:16.1: PME: Signaling with IRQ 33 Jul 14 23:09:19.737608 kernel: pcieport 0000:00:16.1: pciehp: Slot #193 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.737659 kernel: pcieport 0000:00:16.2: PME: Signaling with IRQ 34 Jul 14 23:09:19.737709 kernel: pcieport 0000:00:16.2: pciehp: Slot #194 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.737762 kernel: pcieport 0000:00:16.3: PME: Signaling with IRQ 35 Jul 14 23:09:19.737811 kernel: pcieport 0000:00:16.3: pciehp: Slot #195 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.737862 kernel: pcieport 0000:00:16.4: PME: Signaling with IRQ 36 Jul 14 23:09:19.737912 kernel: pcieport 0000:00:16.4: pciehp: Slot #196 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.737963 kernel: pcieport 0000:00:16.5: PME: Signaling with IRQ 37 Jul 14 23:09:19.738016 kernel: pcieport 0000:00:16.5: pciehp: Slot #197 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.738068 kernel: pcieport 0000:00:16.6: PME: Signaling with IRQ 38 Jul 14 23:09:19.738126 kernel: pcieport 0000:00:16.6: pciehp: Slot #198 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.738178 kernel: pcieport 0000:00:16.7: PME: Signaling with IRQ 39 Jul 14 23:09:19.738228 kernel: pcieport 0000:00:16.7: pciehp: Slot #199 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.738283 kernel: pcieport 0000:00:17.0: PME: Signaling with IRQ 40 Jul 14 23:09:19.738332 kernel: pcieport 0000:00:17.0: pciehp: Slot #224 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.738383 kernel: pcieport 0000:00:17.1: PME: Signaling with IRQ 41 Jul 14 23:09:19.738433 kernel: pcieport 0000:00:17.1: pciehp: Slot #225 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.738483 kernel: pcieport 0000:00:17.2: PME: Signaling with IRQ 42 Jul 14 23:09:19.738532 kernel: pcieport 0000:00:17.2: pciehp: Slot #226 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.738584 kernel: pcieport 0000:00:17.3: PME: Signaling with IRQ 43 Jul 14 23:09:19.738955 kernel: pcieport 0000:00:17.3: pciehp: Slot #227 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.739014 kernel: pcieport 0000:00:17.4: PME: Signaling with IRQ 44 Jul 14 23:09:19.739079 kernel: pcieport 0000:00:17.4: pciehp: Slot #228 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.739135 kernel: pcieport 0000:00:17.5: PME: Signaling with IRQ 45 Jul 14 23:09:19.739187 kernel: pcieport 0000:00:17.5: pciehp: Slot #229 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.739249 kernel: pcieport 0000:00:17.6: PME: Signaling with IRQ 46 Jul 14 23:09:19.739303 kernel: pcieport 0000:00:17.6: pciehp: Slot #230 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.739354 kernel: pcieport 0000:00:17.7: PME: Signaling with IRQ 47 Jul 14 23:09:19.739404 kernel: pcieport 0000:00:17.7: pciehp: Slot #231 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.739610 kernel: pcieport 0000:00:18.0: PME: Signaling with IRQ 48 Jul 14 23:09:19.739664 kernel: pcieport 0000:00:18.0: pciehp: Slot #256 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.739719 kernel: pcieport 0000:00:18.1: PME: Signaling with IRQ 49 Jul 14 23:09:19.739769 kernel: pcieport 0000:00:18.1: pciehp: Slot #257 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.739821 kernel: pcieport 0000:00:18.2: PME: Signaling with IRQ 50 Jul 14 23:09:19.739871 kernel: pcieport 0000:00:18.2: pciehp: Slot #258 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.739923 kernel: pcieport 0000:00:18.3: PME: Signaling with IRQ 51 Jul 14 23:09:19.739973 kernel: pcieport 0000:00:18.3: pciehp: Slot #259 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.740025 kernel: pcieport 0000:00:18.4: PME: Signaling with IRQ 52 Jul 14 23:09:19.740110 kernel: pcieport 0000:00:18.4: pciehp: Slot #260 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.740164 kernel: pcieport 0000:00:18.5: PME: Signaling with IRQ 53 Jul 14 23:09:19.740214 kernel: pcieport 0000:00:18.5: pciehp: Slot #261 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.740263 kernel: pcieport 0000:00:18.6: PME: Signaling with IRQ 54 Jul 14 23:09:19.740312 kernel: pcieport 0000:00:18.6: pciehp: Slot #262 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.740366 kernel: pcieport 0000:00:18.7: PME: Signaling with IRQ 55 Jul 14 23:09:19.740415 kernel: pcieport 0000:00:18.7: pciehp: Slot #263 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.740426 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 14 23:09:19.740433 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 14 23:09:19.740439 kernel: 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 14 23:09:19.740446 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBC,PNP0f13:MOUS] at 0x60,0x64 irq 1,12 Jul 14 23:09:19.740453 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 14 23:09:19.740459 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 14 23:09:19.740511 kernel: rtc_cmos 00:01: registered as rtc0 Jul 14 23:09:19.740557 kernel: rtc_cmos 00:01: setting system clock to 2025-07-14T23:09:19 UTC (1752534559) Jul 14 23:09:19.740602 kernel: rtc_cmos 00:01: alarms up to one month, y3k, 114 bytes nvram Jul 14 23:09:19.740611 kernel: intel_pstate: CPU model not supported Jul 14 23:09:19.740617 kernel: NET: Registered PF_INET6 protocol family Jul 14 23:09:19.740624 kernel: Segment Routing with IPv6 Jul 14 23:09:19.740632 kernel: In-situ OAM (IOAM) with IPv6 Jul 14 23:09:19.740638 kernel: NET: Registered PF_PACKET protocol family Jul 14 23:09:19.740644 kernel: Key type dns_resolver registered Jul 14 23:09:19.740650 kernel: IPI shorthand broadcast: enabled Jul 14 23:09:19.740657 kernel: sched_clock: Marking stable (886242260, 225625477)->(1177214659, -65346922) Jul 14 23:09:19.740663 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 14 23:09:19.740669 kernel: registered taskstats version 1 Jul 14 23:09:19.740675 kernel: Loading compiled-in X.509 certificates Jul 14 23:09:19.740681 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.187-flatcar: 14a6940dcbc00bab0c83ae71c4abeb315720716d' Jul 14 23:09:19.740886 kernel: Key type .fscrypt registered Jul 14 23:09:19.740895 kernel: Key type fscrypt-provisioning registered Jul 14 23:09:19.740901 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 14 23:09:19.740907 kernel: ima: Allocated hash algorithm: sha1 Jul 14 23:09:19.740914 kernel: ima: No architecture policies found Jul 14 23:09:19.740920 kernel: clk: Disabling unused clocks Jul 14 23:09:19.740926 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 14 23:09:19.740932 kernel: Write protecting the kernel read-only data: 28672k Jul 14 23:09:19.740939 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 14 23:09:19.740947 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 14 23:09:19.740953 kernel: Run /init as init process Jul 14 23:09:19.740959 kernel: with arguments: Jul 14 23:09:19.740965 kernel: /init Jul 14 23:09:19.740971 kernel: with environment: Jul 14 23:09:19.740977 kernel: HOME=/ Jul 14 23:09:19.740983 kernel: TERM=linux Jul 14 23:09:19.740989 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 14 23:09:19.740997 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 23:09:19.741007 systemd[1]: Detected virtualization vmware. Jul 14 23:09:19.741013 systemd[1]: Detected architecture x86-64. Jul 14 23:09:19.741019 systemd[1]: Running in initrd. Jul 14 23:09:19.741026 systemd[1]: No hostname configured, using default hostname. Jul 14 23:09:19.741031 systemd[1]: Hostname set to . Jul 14 23:09:19.741038 systemd[1]: Initializing machine ID from random generator. Jul 14 23:09:19.741044 systemd[1]: Queued start job for default target initrd.target. Jul 14 23:09:19.741050 systemd[1]: Started systemd-ask-password-console.path. Jul 14 23:09:19.741057 systemd[1]: Reached target cryptsetup.target. Jul 14 23:09:19.741063 systemd[1]: Reached target paths.target. Jul 14 23:09:19.741069 systemd[1]: Reached target slices.target. Jul 14 23:09:19.741155 systemd[1]: Reached target swap.target. Jul 14 23:09:19.741409 systemd[1]: Reached target timers.target. Jul 14 23:09:19.741417 systemd[1]: Listening on iscsid.socket. Jul 14 23:09:19.741423 systemd[1]: Listening on iscsiuio.socket. Jul 14 23:09:19.741431 systemd[1]: Listening on systemd-journald-audit.socket. Jul 14 23:09:19.741438 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 14 23:09:19.741445 systemd[1]: Listening on systemd-journald.socket. Jul 14 23:09:19.741451 systemd[1]: Listening on systemd-networkd.socket. Jul 14 23:09:19.741457 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 23:09:19.741463 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 23:09:19.741471 systemd[1]: Reached target sockets.target. Jul 14 23:09:19.741670 systemd[1]: Starting kmod-static-nodes.service... Jul 14 23:09:19.741679 systemd[1]: Finished network-cleanup.service. Jul 14 23:09:19.741688 systemd[1]: Starting systemd-fsck-usr.service... Jul 14 23:09:19.741694 systemd[1]: Starting systemd-journald.service... Jul 14 23:09:19.741700 systemd[1]: Starting systemd-modules-load.service... Jul 14 23:09:19.741707 systemd[1]: Starting systemd-resolved.service... Jul 14 23:09:19.741713 systemd[1]: Starting systemd-vconsole-setup.service... Jul 14 23:09:19.741720 systemd[1]: Finished kmod-static-nodes.service. Jul 14 23:09:19.741726 systemd[1]: Finished systemd-fsck-usr.service. Jul 14 23:09:19.741733 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 14 23:09:19.741739 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 14 23:09:19.741747 kernel: audit: type=1130 audit(1752534559.673:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.741754 systemd[1]: Finished systemd-vconsole-setup.service. Jul 14 23:09:19.741760 systemd[1]: Starting dracut-cmdline-ask.service... Jul 14 23:09:19.741767 kernel: audit: type=1130 audit(1752534559.676:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.741774 systemd[1]: Finished dracut-cmdline-ask.service. Jul 14 23:09:19.741780 kernel: audit: type=1130 audit(1752534559.692:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.741787 systemd[1]: Starting dracut-cmdline.service... Jul 14 23:09:19.741793 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 14 23:09:19.741801 kernel: Bridge firewalling registered Jul 14 23:09:19.741807 systemd[1]: Started systemd-resolved.service. Jul 14 23:09:19.741813 systemd[1]: Reached target nss-lookup.target. Jul 14 23:09:19.741820 kernel: audit: type=1130 audit(1752534559.711:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.741828 kernel: SCSI subsystem initialized Jul 14 23:09:19.741834 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 14 23:09:19.741841 kernel: device-mapper: uevent: version 1.0.3 Jul 14 23:09:19.741847 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 14 23:09:19.741857 systemd-journald[216]: Journal started Jul 14 23:09:19.741913 systemd-journald[216]: Runtime Journal (/run/log/journal/de9b36f808e14b5396c642bbe91b6100) is 4.8M, max 38.8M, 34.0M free. Jul 14 23:09:19.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.745978 systemd[1]: Started systemd-journald.service. Jul 14 23:09:19.746006 kernel: audit: type=1130 audit(1752534559.742:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.655634 systemd-modules-load[217]: Inserted module 'overlay' Jul 14 23:09:19.696306 systemd-resolved[218]: Positive Trust Anchors: Jul 14 23:09:19.696313 systemd-resolved[218]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 23:09:19.696353 systemd-resolved[218]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 23:09:19.707560 systemd-modules-load[217]: Inserted module 'br_netfilter' Jul 14 23:09:19.709893 systemd-resolved[218]: Defaulting to hostname 'linux'. Jul 14 23:09:19.748588 dracut-cmdline[232]: dracut-dracut-053 Jul 14 23:09:19.748588 dracut-cmdline[232]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Jul 14 23:09:19.748588 dracut-cmdline[232]: BEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=d9618a329f89744ce954b0fa1b02ce8164745af7389f9de9c3421ad2087e0dba Jul 14 23:09:19.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.749621 systemd-modules-load[217]: Inserted module 'dm_multipath' Jul 14 23:09:19.753215 kernel: audit: type=1130 audit(1752534559.749:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.750017 systemd[1]: Finished systemd-modules-load.service. Jul 14 23:09:19.750534 systemd[1]: Starting systemd-sysctl.service... Jul 14 23:09:19.756753 systemd[1]: Finished systemd-sysctl.service. Jul 14 23:09:19.759551 kernel: audit: type=1130 audit(1752534559.755:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.774095 kernel: Loading iSCSI transport class v2.0-870. Jul 14 23:09:19.786093 kernel: iscsi: registered transport (tcp) Jul 14 23:09:19.803392 kernel: iscsi: registered transport (qla4xxx) Jul 14 23:09:19.803438 kernel: QLogic iSCSI HBA Driver Jul 14 23:09:19.820320 systemd[1]: Finished dracut-cmdline.service. Jul 14 23:09:19.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.821184 systemd[1]: Starting dracut-pre-udev.service... Jul 14 23:09:19.825249 kernel: audit: type=1130 audit(1752534559.819:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.864120 kernel: raid6: avx2x4 gen() 46379 MB/s Jul 14 23:09:19.881103 kernel: raid6: avx2x4 xor() 13434 MB/s Jul 14 23:09:19.898100 kernel: raid6: avx2x2 gen() 47849 MB/s Jul 14 23:09:19.915099 kernel: raid6: avx2x2 xor() 31540 MB/s Jul 14 23:09:19.932103 kernel: raid6: avx2x1 gen() 43857 MB/s Jul 14 23:09:19.949097 kernel: raid6: avx2x1 xor() 27596 MB/s Jul 14 23:09:19.966107 kernel: raid6: sse2x4 gen() 20400 MB/s Jul 14 23:09:19.983106 kernel: raid6: sse2x4 xor() 8803 MB/s Jul 14 23:09:20.000098 kernel: raid6: sse2x2 gen() 19984 MB/s Jul 14 23:09:20.017098 kernel: raid6: sse2x2 xor() 13278 MB/s Jul 14 23:09:20.034092 kernel: raid6: sse2x1 gen() 17805 MB/s Jul 14 23:09:20.051290 kernel: raid6: sse2x1 xor() 8863 MB/s Jul 14 23:09:20.051332 kernel: raid6: using algorithm avx2x2 gen() 47849 MB/s Jul 14 23:09:20.051353 kernel: raid6: .... xor() 31540 MB/s, rmw enabled Jul 14 23:09:20.052494 kernel: raid6: using avx2x2 recovery algorithm Jul 14 23:09:20.061091 kernel: xor: automatically using best checksumming function avx Jul 14 23:09:20.123100 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 14 23:09:20.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:20.127967 systemd[1]: Finished dracut-pre-udev.service. Jul 14 23:09:20.131211 kernel: audit: type=1130 audit(1752534560.127:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:20.127000 audit: BPF prog-id=7 op=LOAD Jul 14 23:09:20.127000 audit: BPF prog-id=8 op=LOAD Jul 14 23:09:20.128634 systemd[1]: Starting systemd-udevd.service... Jul 14 23:09:20.139122 systemd-udevd[415]: Using default interface naming scheme 'v252'. Jul 14 23:09:20.142088 systemd[1]: Started systemd-udevd.service. Jul 14 23:09:20.142673 systemd[1]: Starting dracut-pre-trigger.service... Jul 14 23:09:20.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:20.149964 dracut-pre-trigger[420]: rd.md=0: removing MD RAID activation Jul 14 23:09:20.166811 systemd[1]: Finished dracut-pre-trigger.service. Jul 14 23:09:20.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:20.167450 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 23:09:20.232184 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 23:09:20.231000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:20.298092 kernel: VMware PVSCSI driver - version 1.0.7.0-k Jul 14 23:09:20.300091 kernel: vmw_pvscsi: using 64bit dma Jul 14 23:09:20.304090 kernel: VMware vmxnet3 virtual NIC driver - version 1.6.0.0-k-NAPI Jul 14 23:09:20.306090 kernel: vmw_pvscsi: max_id: 16 Jul 14 23:09:20.306117 kernel: vmw_pvscsi: setting ring_pages to 8 Jul 14 23:09:20.311091 kernel: vmxnet3 0000:0b:00.0: # of Tx queues : 2, # of Rx queues : 2 Jul 14 23:09:20.326943 kernel: cryptd: max_cpu_qlen set to 1000 Jul 14 23:09:20.326965 kernel: vmxnet3 0000:0b:00.0 eth0: NIC Link is Up 10000 Mbps Jul 14 23:09:20.327041 kernel: vmw_pvscsi: enabling reqCallThreshold Jul 14 23:09:20.327050 kernel: vmw_pvscsi: driver-based request coalescing enabled Jul 14 23:09:20.327058 kernel: vmw_pvscsi: using MSI-X Jul 14 23:09:20.327064 kernel: scsi host0: VMware PVSCSI storage adapter rev 2, req/cmp/msg rings: 8/8/1 pages, cmd_per_lun=254 Jul 14 23:09:20.327149 kernel: vmw_pvscsi 0000:03:00.0: VMware PVSCSI rev 2 host #0 Jul 14 23:09:20.327223 kernel: scsi 0:0:0:0: Direct-Access VMware Virtual disk 2.0 PQ: 0 ANSI: 6 Jul 14 23:09:20.333101 kernel: vmxnet3 0000:0b:00.0 ens192: renamed from eth0 Jul 14 23:09:20.340095 kernel: sd 0:0:0:0: [sda] 17805312 512-byte logical blocks: (9.12 GB/8.49 GiB) Jul 14 23:09:20.353151 kernel: sd 0:0:0:0: [sda] Write Protect is off Jul 14 23:09:20.353228 kernel: sd 0:0:0:0: [sda] Mode Sense: 31 00 00 00 Jul 14 23:09:20.353289 kernel: sd 0:0:0:0: [sda] Cache data unavailable Jul 14 23:09:20.353349 kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through Jul 14 23:09:20.353408 kernel: AVX2 version of gcm_enc/dec engaged. Jul 14 23:09:20.353417 kernel: AES CTR mode by8 optimization enabled Jul 14 23:09:20.353427 kernel: libata version 3.00 loaded. Jul 14 23:09:20.353434 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 14 23:09:20.353441 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Jul 14 23:09:20.356094 kernel: ata_piix 0000:00:07.1: version 2.13 Jul 14 23:09:20.364811 kernel: scsi host1: ata_piix Jul 14 23:09:20.364887 kernel: scsi host2: ata_piix Jul 14 23:09:20.364952 kernel: ata1: PATA max UDMA/33 cmd 0x1f0 ctl 0x3f6 bmdma 0x1060 irq 14 Jul 14 23:09:20.364961 kernel: ata2: PATA max UDMA/33 cmd 0x170 ctl 0x376 bmdma 0x1068 irq 15 Jul 14 23:09:20.386207 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 14 23:09:20.387084 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (462) Jul 14 23:09:20.391014 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 14 23:09:20.393617 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 14 23:09:20.393718 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 14 23:09:20.394280 systemd[1]: Starting disk-uuid.service... Jul 14 23:09:20.397487 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 23:09:20.419095 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 14 23:09:20.427090 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 14 23:09:20.529125 kernel: ata2.00: ATAPI: VMware Virtual IDE CDROM Drive, 00000001, max UDMA/33 Jul 14 23:09:20.533088 kernel: scsi 2:0:0:0: CD-ROM NECVMWar VMware IDE CDR10 1.00 PQ: 0 ANSI: 5 Jul 14 23:09:20.558127 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 1x/1x writer dvd-ram cd/rw xa/form2 cdda tray Jul 14 23:09:20.576176 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 14 23:09:20.576188 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 14 23:09:21.425099 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 14 23:09:21.425407 disk-uuid[548]: The operation has completed successfully. Jul 14 23:09:21.463386 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 14 23:09:21.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.463444 systemd[1]: Finished disk-uuid.service. Jul 14 23:09:21.463994 systemd[1]: Starting verity-setup.service... Jul 14 23:09:21.473180 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Jul 14 23:09:21.511384 systemd[1]: Found device dev-mapper-usr.device. Jul 14 23:09:21.512216 systemd[1]: Mounting sysusr-usr.mount... Jul 14 23:09:21.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.512467 systemd[1]: Finished verity-setup.service. Jul 14 23:09:21.569060 systemd[1]: Mounted sysusr-usr.mount. Jul 14 23:09:21.569275 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 14 23:09:21.569640 systemd[1]: Starting afterburn-network-kargs.service... Jul 14 23:09:21.570086 systemd[1]: Starting ignition-setup.service... Jul 14 23:09:21.587802 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 14 23:09:21.587821 kernel: BTRFS info (device sda6): using free space tree Jul 14 23:09:21.587829 kernel: BTRFS info (device sda6): has skinny extents Jul 14 23:09:21.592084 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 14 23:09:21.598534 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 14 23:09:21.602943 systemd[1]: Finished ignition-setup.service. Jul 14 23:09:21.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.604363 systemd[1]: Starting ignition-fetch-offline.service... Jul 14 23:09:21.658025 systemd[1]: Finished afterburn-network-kargs.service. Jul 14 23:09:21.658744 systemd[1]: Starting parse-ip-for-networkd.service... Jul 14 23:09:21.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.704393 systemd[1]: Finished parse-ip-for-networkd.service. Jul 14 23:09:21.705363 systemd[1]: Starting systemd-networkd.service... Jul 14 23:09:21.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.703000 audit: BPF prog-id=9 op=LOAD Jul 14 23:09:21.719352 systemd-networkd[734]: lo: Link UP Jul 14 23:09:21.719359 systemd-networkd[734]: lo: Gained carrier Jul 14 23:09:21.719670 systemd-networkd[734]: Enumeration completed Jul 14 23:09:21.719900 systemd-networkd[734]: ens192: Configuring with /etc/systemd/network/10-dracut-cmdline-99.network. Jul 14 23:09:21.724247 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 14 23:09:21.724376 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 14 23:09:21.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.720128 systemd[1]: Started systemd-networkd.service. Jul 14 23:09:21.720282 systemd[1]: Reached target network.target. Jul 14 23:09:21.720895 systemd[1]: Starting iscsiuio.service... Jul 14 23:09:21.723916 systemd-networkd[734]: ens192: Link UP Jul 14 23:09:21.723918 systemd-networkd[734]: ens192: Gained carrier Jul 14 23:09:21.725430 systemd[1]: Started iscsiuio.service. Jul 14 23:09:21.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.726037 systemd[1]: Starting iscsid.service... Jul 14 23:09:21.728323 iscsid[739]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 14 23:09:21.728323 iscsid[739]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 14 23:09:21.728323 iscsid[739]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 14 23:09:21.728323 iscsid[739]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 14 23:09:21.728323 iscsid[739]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 14 23:09:21.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.730563 iscsid[739]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 14 23:09:21.730210 systemd[1]: Started iscsid.service. Jul 14 23:09:21.731125 systemd[1]: Starting dracut-initqueue.service... Jul 14 23:09:21.738419 systemd[1]: Finished dracut-initqueue.service. Jul 14 23:09:21.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.738597 systemd[1]: Reached target remote-fs-pre.target. Jul 14 23:09:21.738688 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 23:09:21.739144 systemd[1]: Reached target remote-fs.target. Jul 14 23:09:21.739765 systemd[1]: Starting dracut-pre-mount.service... Jul 14 23:09:21.745589 systemd[1]: Finished dracut-pre-mount.service. Jul 14 23:09:21.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.759954 ignition[605]: Ignition 2.14.0 Jul 14 23:09:21.759961 ignition[605]: Stage: fetch-offline Jul 14 23:09:21.759995 ignition[605]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:09:21.760010 ignition[605]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:09:21.763405 ignition[605]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:09:21.763478 ignition[605]: parsed url from cmdline: "" Jul 14 23:09:21.763480 ignition[605]: no config URL provided Jul 14 23:09:21.763483 ignition[605]: reading system config file "/usr/lib/ignition/user.ign" Jul 14 23:09:21.763488 ignition[605]: no config at "/usr/lib/ignition/user.ign" Jul 14 23:09:21.763867 ignition[605]: config successfully fetched Jul 14 23:09:21.763884 ignition[605]: parsing config with SHA512: 1123772092a3b4a6b8935ec4318422d5995c10d6ba94c6233d93048afc7140dd9c72e9e98d440259e280ce59ad1bcf5261e244e5e41c3465f27aba3127cb1b96 Jul 14 23:09:21.775445 unknown[605]: fetched base config from "system" Jul 14 23:09:21.775646 unknown[605]: fetched user config from "vmware" Jul 14 23:09:21.776127 ignition[605]: fetch-offline: fetch-offline passed Jul 14 23:09:21.776299 ignition[605]: Ignition finished successfully Jul 14 23:09:21.776952 systemd[1]: Finished ignition-fetch-offline.service. Jul 14 23:09:21.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.777175 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 14 23:09:21.777812 systemd[1]: Starting ignition-kargs.service... Jul 14 23:09:21.785329 ignition[753]: Ignition 2.14.0 Jul 14 23:09:21.785343 ignition[753]: Stage: kargs Jul 14 23:09:21.785436 ignition[753]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:09:21.785451 ignition[753]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:09:21.787635 ignition[753]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:09:21.789644 ignition[753]: kargs: kargs passed Jul 14 23:09:21.789692 ignition[753]: Ignition finished successfully Jul 14 23:09:21.790639 systemd[1]: Finished ignition-kargs.service. Jul 14 23:09:21.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.791264 systemd[1]: Starting ignition-disks.service... Jul 14 23:09:21.795884 ignition[759]: Ignition 2.14.0 Jul 14 23:09:21.796150 ignition[759]: Stage: disks Jul 14 23:09:21.796322 ignition[759]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:09:21.796479 ignition[759]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:09:21.797825 ignition[759]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:09:21.799507 ignition[759]: disks: disks passed Jul 14 23:09:21.799657 ignition[759]: Ignition finished successfully Jul 14 23:09:21.800263 systemd[1]: Finished ignition-disks.service. Jul 14 23:09:21.800440 systemd[1]: Reached target initrd-root-device.target. Jul 14 23:09:21.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.800551 systemd[1]: Reached target local-fs-pre.target. Jul 14 23:09:21.800704 systemd[1]: Reached target local-fs.target. Jul 14 23:09:21.800870 systemd[1]: Reached target sysinit.target. Jul 14 23:09:21.801028 systemd[1]: Reached target basic.target. Jul 14 23:09:21.801677 systemd[1]: Starting systemd-fsck-root.service... Jul 14 23:09:21.818280 systemd-fsck[767]: ROOT: clean, 619/1628000 files, 124060/1617920 blocks Jul 14 23:09:21.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.821496 systemd[1]: Finished systemd-fsck-root.service. Jul 14 23:09:21.822149 systemd[1]: Mounting sysroot.mount... Jul 14 23:09:21.844668 systemd[1]: Mounted sysroot.mount. Jul 14 23:09:21.844803 systemd[1]: Reached target initrd-root-fs.target. Jul 14 23:09:21.845161 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 14 23:09:21.847065 systemd[1]: Mounting sysroot-usr.mount... Jul 14 23:09:21.847412 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 14 23:09:21.847433 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 14 23:09:21.847446 systemd[1]: Reached target ignition-diskful.target. Jul 14 23:09:21.848862 systemd[1]: Mounted sysroot-usr.mount. Jul 14 23:09:21.849465 systemd[1]: Starting initrd-setup-root.service... Jul 14 23:09:21.853016 initrd-setup-root[777]: cut: /sysroot/etc/passwd: No such file or directory Jul 14 23:09:21.858511 initrd-setup-root[785]: cut: /sysroot/etc/group: No such file or directory Jul 14 23:09:21.860653 initrd-setup-root[793]: cut: /sysroot/etc/shadow: No such file or directory Jul 14 23:09:21.862904 initrd-setup-root[801]: cut: /sysroot/etc/gshadow: No such file or directory Jul 14 23:09:21.905179 systemd[1]: Finished initrd-setup-root.service. Jul 14 23:09:21.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.905776 systemd[1]: Starting ignition-mount.service... Jul 14 23:09:21.906228 systemd[1]: Starting sysroot-boot.service... Jul 14 23:09:21.910471 bash[818]: umount: /sysroot/usr/share/oem: not mounted. Jul 14 23:09:21.915677 ignition[819]: INFO : Ignition 2.14.0 Jul 14 23:09:21.915677 ignition[819]: INFO : Stage: mount Jul 14 23:09:21.916051 ignition[819]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:09:21.916051 ignition[819]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:09:21.917397 ignition[819]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:09:21.919368 ignition[819]: INFO : mount: mount passed Jul 14 23:09:21.919507 ignition[819]: INFO : Ignition finished successfully Jul 14 23:09:21.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.920177 systemd[1]: Finished ignition-mount.service. Jul 14 23:09:21.932988 systemd[1]: Finished sysroot-boot.service. Jul 14 23:09:21.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:22.037680 systemd-resolved[218]: Detected conflict on linux IN A 139.178.70.104 Jul 14 23:09:22.037692 systemd-resolved[218]: Hostname conflict, changing published hostname from 'linux' to 'linux9'. Jul 14 23:09:22.527247 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 14 23:09:22.537088 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (828) Jul 14 23:09:22.537116 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 14 23:09:22.537128 kernel: BTRFS info (device sda6): using free space tree Jul 14 23:09:22.538846 kernel: BTRFS info (device sda6): has skinny extents Jul 14 23:09:22.543094 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 14 23:09:22.544281 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 14 23:09:22.545113 systemd[1]: Starting ignition-files.service... Jul 14 23:09:22.556220 ignition[848]: INFO : Ignition 2.14.0 Jul 14 23:09:22.556220 ignition[848]: INFO : Stage: files Jul 14 23:09:22.556525 ignition[848]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:09:22.556525 ignition[848]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:09:22.557492 ignition[848]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:09:22.559546 ignition[848]: DEBUG : files: compiled without relabeling support, skipping Jul 14 23:09:22.559953 ignition[848]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 14 23:09:22.559953 ignition[848]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 14 23:09:22.561774 ignition[848]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 14 23:09:22.561984 ignition[848]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 14 23:09:22.562852 unknown[848]: wrote ssh authorized keys file for user: core Jul 14 23:09:22.563276 ignition[848]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 14 23:09:22.563705 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 14 23:09:22.563879 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Jul 14 23:09:22.603152 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 14 23:09:22.757450 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 14 23:09:22.757800 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 14 23:09:22.758256 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 14 23:09:22.758478 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 14 23:09:22.758769 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 14 23:09:22.758987 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 23:09:22.759283 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 23:09:22.759513 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 23:09:22.759785 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 23:09:22.762106 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 23:09:22.762375 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 23:09:22.762604 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 14 23:09:22.762906 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 14 23:09:22.763771 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 14 23:09:22.763999 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Jul 14 23:09:22.767187 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3247426593" Jul 14 23:09:22.767412 ignition[848]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3247426593": device or resource busy Jul 14 23:09:22.767635 ignition[848]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3247426593", trying btrfs: device or resource busy Jul 14 23:09:22.767868 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3247426593" Jul 14 23:09:22.768152 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3247426593" Jul 14 23:09:22.768740 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem3247426593" Jul 14 23:09:22.768940 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem3247426593" Jul 14 23:09:22.769131 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 14 23:09:22.769329 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 14 23:09:22.769569 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Jul 14 23:09:22.770116 systemd[1]: mnt-oem3247426593.mount: Deactivated successfully. Jul 14 23:09:23.107288 systemd-networkd[734]: ens192: Gained IPv6LL Jul 14 23:09:23.524430 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET result: OK Jul 14 23:09:24.129546 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 14 23:09:24.137200 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 14 23:09:24.137406 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 14 23:09:24.137406 ignition[848]: INFO : files: op(10): [started] processing unit "vmtoolsd.service" Jul 14 23:09:24.137406 ignition[848]: INFO : files: op(10): [finished] processing unit "vmtoolsd.service" Jul 14 23:09:24.137406 ignition[848]: INFO : files: op(11): [started] processing unit "prepare-helm.service" Jul 14 23:09:24.137406 ignition[848]: INFO : files: op(11): op(12): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 23:09:24.137406 ignition[848]: INFO : files: op(11): op(12): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 23:09:24.137406 ignition[848]: INFO : files: op(11): [finished] processing unit "prepare-helm.service" Jul 14 23:09:24.137406 ignition[848]: INFO : files: op(13): [started] processing unit "coreos-metadata.service" Jul 14 23:09:24.137406 ignition[848]: INFO : files: op(13): op(14): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 23:09:24.139399 ignition[848]: INFO : files: op(13): op(14): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 23:09:24.139399 ignition[848]: INFO : files: op(13): [finished] processing unit "coreos-metadata.service" Jul 14 23:09:24.139399 ignition[848]: INFO : files: op(15): [started] setting preset to enabled for "vmtoolsd.service" Jul 14 23:09:24.139399 ignition[848]: INFO : files: op(15): [finished] setting preset to enabled for "vmtoolsd.service" Jul 14 23:09:24.139399 ignition[848]: INFO : files: op(16): [started] setting preset to enabled for "prepare-helm.service" Jul 14 23:09:24.139399 ignition[848]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-helm.service" Jul 14 23:09:24.139399 ignition[848]: INFO : files: op(17): [started] setting preset to disabled for "coreos-metadata.service" Jul 14 23:09:24.139399 ignition[848]: INFO : files: op(17): op(18): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 23:09:24.221775 ignition[848]: INFO : files: op(17): op(18): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 23:09:24.222035 ignition[848]: INFO : files: op(17): [finished] setting preset to disabled for "coreos-metadata.service" Jul 14 23:09:24.222035 ignition[848]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 14 23:09:24.222035 ignition[848]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 14 23:09:24.222035 ignition[848]: INFO : files: files passed Jul 14 23:09:24.222035 ignition[848]: INFO : Ignition finished successfully Jul 14 23:09:24.222607 systemd[1]: Finished ignition-files.service. Jul 14 23:09:24.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.223962 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 14 23:09:24.227733 kernel: kauditd_printk_skb: 24 callbacks suppressed Jul 14 23:09:24.227747 kernel: audit: type=1130 audit(1752534564.221:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.226978 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 14 23:09:24.227447 systemd[1]: Starting ignition-quench.service... Jul 14 23:09:24.231437 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 14 23:09:24.231488 systemd[1]: Finished ignition-quench.service. Jul 14 23:09:24.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.232246 initrd-setup-root-after-ignition[874]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 14 23:09:24.237567 kernel: audit: type=1130 audit(1752534564.230:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.237582 kernel: audit: type=1131 audit(1752534564.230:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.237590 kernel: audit: type=1130 audit(1752534564.236:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.237386 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 14 23:09:24.237532 systemd[1]: Reached target ignition-complete.target. Jul 14 23:09:24.241102 systemd[1]: Starting initrd-parse-etc.service... Jul 14 23:09:24.251657 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 14 23:09:24.251728 systemd[1]: Finished initrd-parse-etc.service. Jul 14 23:09:24.252002 systemd[1]: Reached target initrd-fs.target. Jul 14 23:09:24.258015 kernel: audit: type=1130 audit(1752534564.250:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.258033 kernel: audit: type=1131 audit(1752534564.250:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.250000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.257932 systemd[1]: Reached target initrd.target. Jul 14 23:09:24.258138 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 14 23:09:24.258756 systemd[1]: Starting dracut-pre-pivot.service... Jul 14 23:09:24.267910 systemd[1]: Finished dracut-pre-pivot.service. Jul 14 23:09:24.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.271225 kernel: audit: type=1130 audit(1752534564.267:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.271068 systemd[1]: Starting initrd-cleanup.service... Jul 14 23:09:24.278962 systemd[1]: Stopped target nss-lookup.target. Jul 14 23:09:24.279381 systemd[1]: Stopped target remote-cryptsetup.target. Jul 14 23:09:24.279758 systemd[1]: Stopped target timers.target. Jul 14 23:09:24.280115 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 14 23:09:24.280392 systemd[1]: Stopped dracut-pre-pivot.service. Jul 14 23:09:24.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.280873 systemd[1]: Stopped target initrd.target. Jul 14 23:09:24.283517 systemd[1]: Stopped target basic.target. Jul 14 23:09:24.283858 systemd[1]: Stopped target ignition-complete.target. Jul 14 23:09:24.284098 kernel: audit: type=1131 audit(1752534564.279:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.284261 systemd[1]: Stopped target ignition-diskful.target. Jul 14 23:09:24.284611 systemd[1]: Stopped target initrd-root-device.target. Jul 14 23:09:24.284966 systemd[1]: Stopped target remote-fs.target. Jul 14 23:09:24.285314 systemd[1]: Stopped target remote-fs-pre.target. Jul 14 23:09:24.285666 systemd[1]: Stopped target sysinit.target. Jul 14 23:09:24.286012 systemd[1]: Stopped target local-fs.target. Jul 14 23:09:24.286360 systemd[1]: Stopped target local-fs-pre.target. Jul 14 23:09:24.286701 systemd[1]: Stopped target swap.target. Jul 14 23:09:24.286996 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 14 23:09:24.287280 systemd[1]: Stopped dracut-pre-mount.service. Jul 14 23:09:24.286000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.287736 systemd[1]: Stopped target cryptsetup.target. Jul 14 23:09:24.290105 kernel: audit: type=1131 audit(1752534564.286:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.290217 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 14 23:09:24.290296 systemd[1]: Stopped dracut-initqueue.service. Jul 14 23:09:24.290533 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 14 23:09:24.293579 kernel: audit: type=1131 audit(1752534564.289:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.290593 systemd[1]: Stopped ignition-fetch-offline.service. Jul 14 23:09:24.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.293710 systemd[1]: Stopped target paths.target. Jul 14 23:09:24.293876 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 14 23:09:24.295105 systemd[1]: Stopped systemd-ask-password-console.path. Jul 14 23:09:24.295282 systemd[1]: Stopped target slices.target. Jul 14 23:09:24.295443 systemd[1]: Stopped target sockets.target. Jul 14 23:09:24.295623 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 14 23:09:24.295684 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 14 23:09:24.296101 systemd[1]: ignition-files.service: Deactivated successfully. Jul 14 23:09:24.296156 systemd[1]: Stopped ignition-files.service. Jul 14 23:09:24.296964 systemd[1]: Stopping ignition-mount.service... Jul 14 23:09:24.305123 iscsid[739]: iscsid shutting down. Jul 14 23:09:24.299013 systemd[1]: Stopping iscsid.service... Jul 14 23:09:24.305361 ignition[887]: INFO : Ignition 2.14.0 Jul 14 23:09:24.305361 ignition[887]: INFO : Stage: umount Jul 14 23:09:24.305361 ignition[887]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:09:24.305361 ignition[887]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:09:24.305361 ignition[887]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:09:24.299553 systemd[1]: Stopping sysroot-boot.service... Jul 14 23:09:24.299657 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 14 23:09:24.299753 systemd[1]: Stopped systemd-udev-trigger.service. Jul 14 23:09:24.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.299976 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 14 23:09:24.300052 systemd[1]: Stopped dracut-pre-trigger.service. Jul 14 23:09:24.301464 systemd[1]: iscsid.service: Deactivated successfully. Jul 14 23:09:24.301584 systemd[1]: Stopped iscsid.service. Jul 14 23:09:24.310371 ignition[887]: INFO : umount: umount passed Jul 14 23:09:24.310371 ignition[887]: INFO : Ignition finished successfully Jul 14 23:09:24.302369 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 14 23:09:24.302412 systemd[1]: Finished initrd-cleanup.service. Jul 14 23:09:24.306672 systemd[1]: iscsid.socket: Deactivated successfully. Jul 14 23:09:24.306692 systemd[1]: Closed iscsid.socket. Jul 14 23:09:24.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.308169 systemd[1]: Stopping iscsiuio.service... Jul 14 23:09:24.310222 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 14 23:09:24.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.310362 systemd[1]: Stopped iscsiuio.service. Jul 14 23:09:24.310985 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 14 23:09:24.311027 systemd[1]: Stopped ignition-mount.service. Jul 14 23:09:24.311210 systemd[1]: Stopped target network.target. Jul 14 23:09:24.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.311319 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 14 23:09:24.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.311338 systemd[1]: Closed iscsiuio.socket. Jul 14 23:09:24.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.311523 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 14 23:09:24.311545 systemd[1]: Stopped ignition-disks.service. Jul 14 23:09:24.311923 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 14 23:09:24.311946 systemd[1]: Stopped ignition-kargs.service. Jul 14 23:09:24.312215 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 14 23:09:24.312235 systemd[1]: Stopped ignition-setup.service. Jul 14 23:09:24.312789 systemd[1]: Stopping systemd-networkd.service... Jul 14 23:09:24.313326 systemd[1]: Stopping systemd-resolved.service... Jul 14 23:09:24.315181 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 14 23:09:24.317739 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 14 23:09:24.317939 systemd[1]: Stopped systemd-networkd.service. Jul 14 23:09:24.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.318521 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 14 23:09:24.318676 systemd[1]: Closed systemd-networkd.socket. Jul 14 23:09:24.319364 systemd[1]: Stopping network-cleanup.service... Jul 14 23:09:24.319641 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 14 23:09:24.319805 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 14 23:09:24.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.320379 systemd[1]: afterburn-network-kargs.service: Deactivated successfully. Jul 14 23:09:24.320546 systemd[1]: Stopped afterburn-network-kargs.service. Jul 14 23:09:24.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.320815 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 14 23:09:24.320967 systemd[1]: Stopped systemd-sysctl.service. Jul 14 23:09:24.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.321270 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 14 23:09:24.321426 systemd[1]: Stopped systemd-modules-load.service. Jul 14 23:09:24.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.321000 audit: BPF prog-id=9 op=UNLOAD Jul 14 23:09:24.323486 systemd[1]: Stopping systemd-udevd.service... Jul 14 23:09:24.324251 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 14 23:09:24.325548 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 14 23:09:24.325611 systemd[1]: Stopped systemd-resolved.service. Jul 14 23:09:24.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.326276 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 14 23:09:24.326354 systemd[1]: Stopped systemd-udevd.service. Jul 14 23:09:24.325000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.326706 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 14 23:09:24.326729 systemd[1]: Closed systemd-udevd-control.socket. Jul 14 23:09:24.326935 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 14 23:09:24.326954 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 14 23:09:24.327092 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 14 23:09:24.327116 systemd[1]: Stopped dracut-pre-udev.service. Jul 14 23:09:24.327000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.328000 audit: BPF prog-id=6 op=UNLOAD Jul 14 23:09:24.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.329039 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 14 23:09:24.329063 systemd[1]: Stopped dracut-cmdline.service. Jul 14 23:09:24.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.329254 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 14 23:09:24.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.329274 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 14 23:09:24.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.329734 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 14 23:09:24.330010 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 14 23:09:24.330039 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 14 23:09:24.330333 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 14 23:09:24.330355 systemd[1]: Stopped kmod-static-nodes.service. Jul 14 23:09:24.330639 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 14 23:09:24.330660 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 14 23:09:24.332481 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 14 23:09:24.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.332750 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 14 23:09:24.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.333189 systemd[1]: Stopped network-cleanup.service. Jul 14 23:09:24.333532 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 14 23:09:24.333726 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 14 23:09:24.378498 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 14 23:09:24.378558 systemd[1]: Stopped sysroot-boot.service. Jul 14 23:09:24.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.378844 systemd[1]: Reached target initrd-switch-root.target. Jul 14 23:09:24.378958 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 14 23:09:24.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:24.378984 systemd[1]: Stopped initrd-setup-root.service. Jul 14 23:09:24.379570 systemd[1]: Starting initrd-switch-root.service... Jul 14 23:09:24.386962 systemd[1]: Switching root. Jul 14 23:09:24.403139 systemd-journald[216]: Journal stopped Jul 14 23:09:26.941179 systemd-journald[216]: Received SIGTERM from PID 1 (systemd). Jul 14 23:09:26.941199 kernel: SELinux: Class mctp_socket not defined in policy. Jul 14 23:09:26.941207 kernel: SELinux: Class anon_inode not defined in policy. Jul 14 23:09:26.941217 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 14 23:09:26.941227 kernel: SELinux: policy capability network_peer_controls=1 Jul 14 23:09:26.941234 kernel: SELinux: policy capability open_perms=1 Jul 14 23:09:26.941242 kernel: SELinux: policy capability extended_socket_class=1 Jul 14 23:09:26.941248 kernel: SELinux: policy capability always_check_network=0 Jul 14 23:09:26.941253 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 14 23:09:26.941259 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 14 23:09:26.941267 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 14 23:09:26.941277 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 14 23:09:26.941289 systemd[1]: Successfully loaded SELinux policy in 39.834ms. Jul 14 23:09:26.941298 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 5.738ms. Jul 14 23:09:26.941306 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 23:09:26.941313 systemd[1]: Detected virtualization vmware. Jul 14 23:09:26.941321 systemd[1]: Detected architecture x86-64. Jul 14 23:09:26.941327 systemd[1]: Detected first boot. Jul 14 23:09:26.941333 systemd[1]: Initializing machine ID from random generator. Jul 14 23:09:26.941340 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 14 23:09:26.941346 systemd[1]: Populated /etc with preset unit settings. Jul 14 23:09:26.941353 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 23:09:26.941359 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 23:09:26.941366 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 23:09:26.941374 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 14 23:09:26.941380 systemd[1]: Stopped initrd-switch-root.service. Jul 14 23:09:26.941387 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 14 23:09:26.941394 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 14 23:09:26.941401 systemd[1]: Created slice system-addon\x2drun.slice. Jul 14 23:09:26.941407 systemd[1]: Created slice system-getty.slice. Jul 14 23:09:26.941413 systemd[1]: Created slice system-modprobe.slice. Jul 14 23:09:26.941421 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 14 23:09:26.941427 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 14 23:09:26.941434 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 14 23:09:26.941440 systemd[1]: Created slice user.slice. Jul 14 23:09:26.941446 systemd[1]: Started systemd-ask-password-console.path. Jul 14 23:09:26.941453 systemd[1]: Started systemd-ask-password-wall.path. Jul 14 23:09:26.941459 systemd[1]: Set up automount boot.automount. Jul 14 23:09:26.941465 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 14 23:09:26.941473 systemd[1]: Stopped target initrd-switch-root.target. Jul 14 23:09:26.941480 systemd[1]: Stopped target initrd-fs.target. Jul 14 23:09:26.941488 systemd[1]: Stopped target initrd-root-fs.target. Jul 14 23:09:26.941495 systemd[1]: Reached target integritysetup.target. Jul 14 23:09:26.941506 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 23:09:26.941723 systemd[1]: Reached target remote-fs.target. Jul 14 23:09:26.941730 systemd[1]: Reached target slices.target. Jul 14 23:09:26.941737 systemd[1]: Reached target swap.target. Jul 14 23:09:26.941744 systemd[1]: Reached target torcx.target. Jul 14 23:09:26.941753 systemd[1]: Reached target veritysetup.target. Jul 14 23:09:26.941759 systemd[1]: Listening on systemd-coredump.socket. Jul 14 23:09:26.941766 systemd[1]: Listening on systemd-initctl.socket. Jul 14 23:09:26.941773 systemd[1]: Listening on systemd-networkd.socket. Jul 14 23:09:26.941779 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 23:09:26.941786 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 23:09:26.941794 systemd[1]: Listening on systemd-userdbd.socket. Jul 14 23:09:26.941801 systemd[1]: Mounting dev-hugepages.mount... Jul 14 23:09:26.941808 systemd[1]: Mounting dev-mqueue.mount... Jul 14 23:09:26.941815 systemd[1]: Mounting media.mount... Jul 14 23:09:26.941822 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:26.941829 systemd[1]: Mounting sys-kernel-debug.mount... Jul 14 23:09:26.941836 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 14 23:09:26.941844 systemd[1]: Mounting tmp.mount... Jul 14 23:09:26.941851 systemd[1]: Starting flatcar-tmpfiles.service... Jul 14 23:09:26.941857 systemd[1]: Starting ignition-delete-config.service... Jul 14 23:09:26.941864 systemd[1]: Starting kmod-static-nodes.service... Jul 14 23:09:26.941871 systemd[1]: Starting modprobe@configfs.service... Jul 14 23:09:26.941877 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:09:26.941884 systemd[1]: Starting modprobe@drm.service... Jul 14 23:09:26.941891 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:09:26.941898 systemd[1]: Starting modprobe@fuse.service... Jul 14 23:09:26.941906 systemd[1]: Starting modprobe@loop.service... Jul 14 23:09:26.941913 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 14 23:09:26.941920 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 14 23:09:26.941927 systemd[1]: Stopped systemd-fsck-root.service. Jul 14 23:09:26.941934 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 14 23:09:26.941941 systemd[1]: Stopped systemd-fsck-usr.service. Jul 14 23:09:26.941947 systemd[1]: Stopped systemd-journald.service. Jul 14 23:09:26.941954 systemd[1]: Starting systemd-journald.service... Jul 14 23:09:26.941961 systemd[1]: Starting systemd-modules-load.service... Jul 14 23:09:26.941969 systemd[1]: Starting systemd-network-generator.service... Jul 14 23:09:26.941976 systemd[1]: Starting systemd-remount-fs.service... Jul 14 23:09:26.941982 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 23:09:26.941989 systemd[1]: verity-setup.service: Deactivated successfully. Jul 14 23:09:26.941996 systemd[1]: Stopped verity-setup.service. Jul 14 23:09:26.942003 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:26.942010 systemd[1]: Mounted dev-hugepages.mount. Jul 14 23:09:26.942017 systemd[1]: Mounted dev-mqueue.mount. Jul 14 23:09:26.942023 systemd[1]: Mounted media.mount. Jul 14 23:09:26.942031 systemd[1]: Mounted sys-kernel-debug.mount. Jul 14 23:09:26.942038 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 14 23:09:26.942046 systemd[1]: Mounted tmp.mount. Jul 14 23:09:26.942053 systemd[1]: Finished kmod-static-nodes.service. Jul 14 23:09:26.942060 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 14 23:09:26.942066 systemd[1]: Finished modprobe@configfs.service. Jul 14 23:09:26.942104 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:09:26.942113 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:09:26.942120 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 23:09:26.942129 systemd[1]: Finished modprobe@drm.service. Jul 14 23:09:26.942136 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:09:26.942143 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:09:26.942150 systemd[1]: Finished systemd-network-generator.service. Jul 14 23:09:26.942156 systemd[1]: Finished systemd-remount-fs.service. Jul 14 23:09:26.942163 systemd[1]: Reached target network-pre.target. Jul 14 23:09:26.942170 kernel: loop: module loaded Jul 14 23:09:26.942176 systemd[1]: Mounting sys-kernel-config.mount... Jul 14 23:09:26.942183 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 14 23:09:26.942191 kernel: fuse: init (API version 7.34) Jul 14 23:09:26.942201 systemd-journald[1016]: Journal started Jul 14 23:09:26.942234 systemd-journald[1016]: Runtime Journal (/run/log/journal/51a4634169f14882aac9c98ace92fba4) is 4.8M, max 38.8M, 34.0M free. Jul 14 23:09:24.807000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 14 23:09:24.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 23:09:24.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 23:09:24.853000 audit: BPF prog-id=10 op=LOAD Jul 14 23:09:24.853000 audit: BPF prog-id=10 op=UNLOAD Jul 14 23:09:24.853000 audit: BPF prog-id=11 op=LOAD Jul 14 23:09:24.853000 audit: BPF prog-id=11 op=UNLOAD Jul 14 23:09:24.937000 audit[920]: AVC avc: denied { associate } for pid=920 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 14 23:09:24.937000 audit[920]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001178d2 a1=c00002ae40 a2=c000029080 a3=32 items=0 ppid=903 pid=920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:09:24.937000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 23:09:24.938000 audit[920]: AVC avc: denied { associate } for pid=920 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 14 23:09:24.938000 audit[920]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001179a9 a2=1ed a3=0 items=2 ppid=903 pid=920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:09:24.938000 audit: CWD cwd="/" Jul 14 23:09:24.938000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:24.938000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:24.938000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 23:09:26.811000 audit: BPF prog-id=12 op=LOAD Jul 14 23:09:26.811000 audit: BPF prog-id=3 op=UNLOAD Jul 14 23:09:26.811000 audit: BPF prog-id=13 op=LOAD Jul 14 23:09:26.811000 audit: BPF prog-id=14 op=LOAD Jul 14 23:09:26.811000 audit: BPF prog-id=4 op=UNLOAD Jul 14 23:09:26.811000 audit: BPF prog-id=5 op=UNLOAD Jul 14 23:09:26.812000 audit: BPF prog-id=15 op=LOAD Jul 14 23:09:26.812000 audit: BPF prog-id=12 op=UNLOAD Jul 14 23:09:26.812000 audit: BPF prog-id=16 op=LOAD Jul 14 23:09:26.812000 audit: BPF prog-id=17 op=LOAD Jul 14 23:09:26.812000 audit: BPF prog-id=13 op=UNLOAD Jul 14 23:09:26.812000 audit: BPF prog-id=14 op=UNLOAD Jul 14 23:09:26.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.819000 audit: BPF prog-id=15 op=UNLOAD Jul 14 23:09:26.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.886000 audit: BPF prog-id=18 op=LOAD Jul 14 23:09:26.887000 audit: BPF prog-id=19 op=LOAD Jul 14 23:09:26.887000 audit: BPF prog-id=20 op=LOAD Jul 14 23:09:26.887000 audit: BPF prog-id=16 op=UNLOAD Jul 14 23:09:26.887000 audit: BPF prog-id=17 op=UNLOAD Jul 14 23:09:26.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.917000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.938000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 14 23:09:26.938000 audit[1016]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffd9b03aeb0 a2=4000 a3=7ffd9b03af4c items=0 ppid=1 pid=1016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:09:26.938000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 14 23:09:24.936288 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 23:09:26.810476 systemd[1]: Queued start job for default target multi-user.target. Jul 14 23:09:24.936696 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 23:09:26.810484 systemd[1]: Unnecessary job was removed for dev-sda6.device. Jul 14 23:09:24.936710 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 23:09:26.813749 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 14 23:09:24.936730 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 14 23:09:24.936736 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 14 23:09:24.936754 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 14 23:09:24.936761 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 14 23:09:24.936889 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 14 23:09:24.936911 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 23:09:26.943922 jq[987]: true Jul 14 23:09:24.936919 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 23:09:24.937820 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 14 23:09:24.937840 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 14 23:09:24.937851 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.101: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.101 Jul 14 23:09:24.937859 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 14 23:09:24.937869 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.101: no such file or directory" path=/var/lib/torcx/store/3510.3.101 Jul 14 23:09:24.937877 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:24Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 14 23:09:26.569897 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:26Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 23:09:26.570049 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:26Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 23:09:26.570125 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:26Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 23:09:26.570228 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:26Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 23:09:26.570261 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:26Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 14 23:09:26.944726 jq[1021]: true Jul 14 23:09:26.570302 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-14T23:09:26Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 14 23:09:26.954409 systemd[1]: Starting systemd-hwdb-update.service... Jul 14 23:09:26.954450 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:09:26.954462 systemd[1]: Starting systemd-random-seed.service... Jul 14 23:09:26.954471 systemd[1]: Started systemd-journald.service. Jul 14 23:09:26.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.953065 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 14 23:09:26.953159 systemd[1]: Finished modprobe@fuse.service. Jul 14 23:09:26.953379 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:09:26.953452 systemd[1]: Finished modprobe@loop.service. Jul 14 23:09:26.954422 systemd[1]: Mounted sys-kernel-config.mount. Jul 14 23:09:26.956769 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 14 23:09:26.960811 systemd[1]: Starting systemd-journal-flush.service... Jul 14 23:09:26.960956 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 23:09:26.962742 systemd[1]: Finished systemd-modules-load.service. Jul 14 23:09:26.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.963377 systemd[1]: Finished systemd-random-seed.service. Jul 14 23:09:26.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.963624 systemd[1]: Finished flatcar-tmpfiles.service. Jul 14 23:09:26.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.963771 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 14 23:09:26.963942 systemd[1]: Reached target first-boot-complete.target. Jul 14 23:09:26.965785 systemd[1]: Starting systemd-sysctl.service... Jul 14 23:09:26.968639 systemd[1]: Starting systemd-sysusers.service... Jul 14 23:09:26.973095 systemd-journald[1016]: Time spent on flushing to /var/log/journal/51a4634169f14882aac9c98ace92fba4 is 20.296ms for 2008 entries. Jul 14 23:09:26.973095 systemd-journald[1016]: System Journal (/var/log/journal/51a4634169f14882aac9c98ace92fba4) is 8.0M, max 584.8M, 576.8M free. Jul 14 23:09:27.022389 systemd-journald[1016]: Received client request to flush runtime journal. Jul 14 23:09:27.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.015764 systemd[1]: Finished systemd-sysctl.service. Jul 14 23:09:27.022900 systemd[1]: Finished systemd-journal-flush.service. Jul 14 23:09:27.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.046799 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 23:09:27.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.047771 systemd[1]: Starting systemd-udev-settle.service... Jul 14 23:09:27.049057 systemd[1]: Finished systemd-sysusers.service. Jul 14 23:09:27.049987 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 14 23:09:27.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.056365 udevadm[1050]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 14 23:09:27.125633 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 14 23:09:27.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.220691 ignition[1037]: Ignition 2.14.0 Jul 14 23:09:27.221172 ignition[1037]: deleting config from guestinfo properties Jul 14 23:09:27.224187 ignition[1037]: Successfully deleted config Jul 14 23:09:27.224906 systemd[1]: Finished ignition-delete-config.service. Jul 14 23:09:27.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ignition-delete-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.496739 systemd[1]: Finished systemd-hwdb-update.service. Jul 14 23:09:27.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.496000 audit: BPF prog-id=21 op=LOAD Jul 14 23:09:27.496000 audit: BPF prog-id=22 op=LOAD Jul 14 23:09:27.496000 audit: BPF prog-id=7 op=UNLOAD Jul 14 23:09:27.496000 audit: BPF prog-id=8 op=UNLOAD Jul 14 23:09:27.497862 systemd[1]: Starting systemd-udevd.service... Jul 14 23:09:27.509739 systemd-udevd[1053]: Using default interface naming scheme 'v252'. Jul 14 23:09:27.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.532000 audit: BPF prog-id=23 op=LOAD Jul 14 23:09:27.532445 systemd[1]: Started systemd-udevd.service. Jul 14 23:09:27.533763 systemd[1]: Starting systemd-networkd.service... Jul 14 23:09:27.543000 audit: BPF prog-id=24 op=LOAD Jul 14 23:09:27.543000 audit: BPF prog-id=25 op=LOAD Jul 14 23:09:27.543000 audit: BPF prog-id=26 op=LOAD Jul 14 23:09:27.544941 systemd[1]: Starting systemd-userdbd.service... Jul 14 23:09:27.563328 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 14 23:09:27.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.582456 systemd[1]: Started systemd-userdbd.service. Jul 14 23:09:27.593088 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 14 23:09:27.607089 kernel: ACPI: button: Power Button [PWRF] Jul 14 23:09:27.673000 audit[1055]: AVC avc: denied { confidentiality } for pid=1055 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 14 23:09:27.673000 audit[1055]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=5616a1609ec0 a1=338ac a2=7f06740f5bc5 a3=5 items=110 ppid=1053 pid=1055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:09:27.673000 audit: CWD cwd="/" Jul 14 23:09:27.673000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=1 name=(null) inode=24773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=2 name=(null) inode=24773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=3 name=(null) inode=24774 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=4 name=(null) inode=24773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=5 name=(null) inode=24775 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=6 name=(null) inode=24773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=7 name=(null) inode=24776 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=8 name=(null) inode=24776 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=9 name=(null) inode=24777 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=10 name=(null) inode=24776 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=11 name=(null) inode=24778 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=12 name=(null) inode=24776 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=13 name=(null) inode=24779 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=14 name=(null) inode=24776 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=15 name=(null) inode=24780 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=16 name=(null) inode=24776 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=17 name=(null) inode=24781 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=18 name=(null) inode=24773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=19 name=(null) inode=24782 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=20 name=(null) inode=24782 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=21 name=(null) inode=24783 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=22 name=(null) inode=24782 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=23 name=(null) inode=24784 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=24 name=(null) inode=24782 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=25 name=(null) inode=24785 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=26 name=(null) inode=24782 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=27 name=(null) inode=24786 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=28 name=(null) inode=24782 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=29 name=(null) inode=24787 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=30 name=(null) inode=24773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=31 name=(null) inode=24788 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=32 name=(null) inode=24788 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=33 name=(null) inode=24789 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=34 name=(null) inode=24788 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=35 name=(null) inode=24790 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=36 name=(null) inode=24788 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=37 name=(null) inode=24791 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=38 name=(null) inode=24788 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=39 name=(null) inode=24792 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=40 name=(null) inode=24788 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=41 name=(null) inode=24793 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=42 name=(null) inode=24773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=43 name=(null) inode=24794 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=44 name=(null) inode=24794 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=45 name=(null) inode=24795 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=46 name=(null) inode=24794 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=47 name=(null) inode=24796 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=48 name=(null) inode=24794 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=49 name=(null) inode=24797 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=50 name=(null) inode=24794 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=51 name=(null) inode=24798 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=52 name=(null) inode=24794 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=53 name=(null) inode=24799 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=55 name=(null) inode=24800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=56 name=(null) inode=24800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=57 name=(null) inode=24801 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=58 name=(null) inode=24800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=59 name=(null) inode=24802 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=60 name=(null) inode=24800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=61 name=(null) inode=24803 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=62 name=(null) inode=24803 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=63 name=(null) inode=24804 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=64 name=(null) inode=24803 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=65 name=(null) inode=24805 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=66 name=(null) inode=24803 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=67 name=(null) inode=24806 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=68 name=(null) inode=24803 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=69 name=(null) inode=24807 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=70 name=(null) inode=24803 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=71 name=(null) inode=24808 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=72 name=(null) inode=24800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=73 name=(null) inode=24809 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=74 name=(null) inode=24809 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=75 name=(null) inode=24810 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=76 name=(null) inode=24809 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=77 name=(null) inode=24811 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=78 name=(null) inode=24809 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=79 name=(null) inode=24812 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=80 name=(null) inode=24809 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=81 name=(null) inode=24813 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=82 name=(null) inode=24809 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=83 name=(null) inode=24814 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=84 name=(null) inode=24800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=85 name=(null) inode=24815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=86 name=(null) inode=24815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=87 name=(null) inode=24816 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=88 name=(null) inode=24815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=89 name=(null) inode=24817 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=90 name=(null) inode=24815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=91 name=(null) inode=24818 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=92 name=(null) inode=24815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=93 name=(null) inode=24819 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=94 name=(null) inode=24815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=95 name=(null) inode=24820 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=96 name=(null) inode=24800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=97 name=(null) inode=24821 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=98 name=(null) inode=24821 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=99 name=(null) inode=24822 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=100 name=(null) inode=24821 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=101 name=(null) inode=24823 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=102 name=(null) inode=24821 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=103 name=(null) inode=24824 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=104 name=(null) inode=24821 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=105 name=(null) inode=24825 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=106 name=(null) inode=24821 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=107 name=(null) inode=24826 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PATH item=109 name=(null) inode=24827 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.673000 audit: PROCTITLE proctitle="(udev-worker)" Jul 14 23:09:27.690675 kernel: vmw_vmci 0000:00:07.7: Found VMCI PCI device at 0x11080, irq 16 Jul 14 23:09:27.699126 kernel: vmw_vmci 0000:00:07.7: Using capabilities 0xc Jul 14 23:09:27.699211 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input3 Jul 14 23:09:27.699222 kernel: Guest personality initialized and is active Jul 14 23:09:27.702273 kernel: VMCI host device registered (name=vmci, major=10, minor=125) Jul 14 23:09:27.702310 kernel: Initialized host personality Jul 14 23:09:27.706417 kernel: piix4_smbus 0000:00:07.3: SMBus Host Controller not enabled! Jul 14 23:09:27.715885 (udev-worker)[1057]: id: Truncating stdout of 'dmi_memory_id' up to 16384 byte. Jul 14 23:09:27.717085 kernel: mousedev: PS/2 mouse device common for all mice Jul 14 23:09:27.822683 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 23:09:27.865325 systemd[1]: Finished systemd-udev-settle.service. Jul 14 23:09:27.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.866503 systemd[1]: Starting lvm2-activation-early.service... Jul 14 23:09:27.934617 systemd-networkd[1061]: lo: Link UP Jul 14 23:09:27.934625 systemd-networkd[1061]: lo: Gained carrier Jul 14 23:09:27.935026 systemd-networkd[1061]: Enumeration completed Jul 14 23:09:27.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.935109 systemd[1]: Started systemd-networkd.service. Jul 14 23:09:27.935125 systemd-networkd[1061]: ens192: Configuring with /etc/systemd/network/00-vmware.network. Jul 14 23:09:27.955751 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 14 23:09:27.955912 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 14 23:09:27.957789 systemd-networkd[1061]: ens192: Link UP Jul 14 23:09:27.957962 systemd-networkd[1061]: ens192: Gained carrier Jul 14 23:09:27.958097 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): ens192: link becomes ready Jul 14 23:09:27.995557 lvm[1086]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 23:09:28.017564 systemd[1]: Finished lvm2-activation-early.service. Jul 14 23:09:28.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.017745 systemd[1]: Reached target cryptsetup.target. Jul 14 23:09:28.018643 systemd[1]: Starting lvm2-activation.service... Jul 14 23:09:28.021298 lvm[1087]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 23:09:28.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.037783 systemd[1]: Finished lvm2-activation.service. Jul 14 23:09:28.037967 systemd[1]: Reached target local-fs-pre.target. Jul 14 23:09:28.038062 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 14 23:09:28.038085 systemd[1]: Reached target local-fs.target. Jul 14 23:09:28.038223 systemd[1]: Reached target machines.target. Jul 14 23:09:28.039196 systemd[1]: Starting ldconfig.service... Jul 14 23:09:28.045445 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.045473 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:09:28.046245 systemd[1]: Starting systemd-boot-update.service... Jul 14 23:09:28.046869 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 14 23:09:28.047653 systemd[1]: Starting systemd-machine-id-commit.service... Jul 14 23:09:28.048474 systemd[1]: Starting systemd-sysext.service... Jul 14 23:09:28.063838 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1089 (bootctl) Jul 14 23:09:28.064565 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 14 23:09:28.074696 systemd[1]: Unmounting usr-share-oem.mount... Jul 14 23:09:28.083059 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 14 23:09:28.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.091003 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 14 23:09:28.091152 systemd[1]: Unmounted usr-share-oem.mount. Jul 14 23:09:28.130099 kernel: loop0: detected capacity change from 0 to 229808 Jul 14 23:09:28.560385 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 14 23:09:28.561305 systemd[1]: Finished systemd-machine-id-commit.service. Jul 14 23:09:28.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.583091 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 14 23:09:28.603383 systemd-fsck[1098]: fsck.fat 4.2 (2021-01-31) Jul 14 23:09:28.603383 systemd-fsck[1098]: /dev/sda1: 790 files, 120725/258078 clusters Jul 14 23:09:28.604774 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 14 23:09:28.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.605902 systemd[1]: Mounting boot.mount... Jul 14 23:09:28.606245 kernel: loop1: detected capacity change from 0 to 229808 Jul 14 23:09:28.618338 systemd[1]: Mounted boot.mount. Jul 14 23:09:28.631325 systemd[1]: Finished systemd-boot-update.service. Jul 14 23:09:28.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.631887 (sd-sysext)[1101]: Using extensions 'kubernetes'. Jul 14 23:09:28.632559 (sd-sysext)[1101]: Merged extensions into '/usr'. Jul 14 23:09:28.643522 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:28.644531 systemd[1]: Mounting usr-share-oem.mount... Jul 14 23:09:28.645285 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:09:28.646898 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:09:28.648196 systemd[1]: Starting modprobe@loop.service... Jul 14 23:09:28.648327 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.648402 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:09:28.648482 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:28.649977 systemd[1]: Mounted usr-share-oem.mount. Jul 14 23:09:28.650886 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:09:28.650960 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:09:28.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.651954 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:09:28.652026 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:09:28.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.652359 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:09:28.652423 systemd[1]: Finished modprobe@loop.service. Jul 14 23:09:28.652716 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:09:28.652774 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.653437 systemd[1]: Finished systemd-sysext.service. Jul 14 23:09:28.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.654399 systemd[1]: Starting ensure-sysext.service... Jul 14 23:09:28.655180 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 14 23:09:28.660226 systemd[1]: Reloading. Jul 14 23:09:28.662848 systemd-tmpfiles[1109]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 14 23:09:28.663776 systemd-tmpfiles[1109]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 14 23:09:28.665339 systemd-tmpfiles[1109]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 14 23:09:28.703838 /usr/lib/systemd/system-generators/torcx-generator[1128]: time="2025-07-14T23:09:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 23:09:28.704038 /usr/lib/systemd/system-generators/torcx-generator[1128]: time="2025-07-14T23:09:28Z" level=info msg="torcx already run" Jul 14 23:09:28.765622 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 23:09:28.765638 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 23:09:28.780909 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 23:09:28.825000 audit: BPF prog-id=27 op=LOAD Jul 14 23:09:28.825000 audit: BPF prog-id=23 op=UNLOAD Jul 14 23:09:28.826000 audit: BPF prog-id=28 op=LOAD Jul 14 23:09:28.826000 audit: BPF prog-id=29 op=LOAD Jul 14 23:09:28.826000 audit: BPF prog-id=21 op=UNLOAD Jul 14 23:09:28.826000 audit: BPF prog-id=22 op=UNLOAD Jul 14 23:09:28.828000 audit: BPF prog-id=30 op=LOAD Jul 14 23:09:28.828000 audit: BPF prog-id=24 op=UNLOAD Jul 14 23:09:28.828000 audit: BPF prog-id=31 op=LOAD Jul 14 23:09:28.828000 audit: BPF prog-id=32 op=LOAD Jul 14 23:09:28.828000 audit: BPF prog-id=25 op=UNLOAD Jul 14 23:09:28.828000 audit: BPF prog-id=26 op=UNLOAD Jul 14 23:09:28.829000 audit: BPF prog-id=33 op=LOAD Jul 14 23:09:28.829000 audit: BPF prog-id=18 op=UNLOAD Jul 14 23:09:28.829000 audit: BPF prog-id=34 op=LOAD Jul 14 23:09:28.829000 audit: BPF prog-id=35 op=LOAD Jul 14 23:09:28.829000 audit: BPF prog-id=19 op=UNLOAD Jul 14 23:09:28.829000 audit: BPF prog-id=20 op=UNLOAD Jul 14 23:09:28.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.834118 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 14 23:09:28.842000 audit: BPF prog-id=36 op=LOAD Jul 14 23:09:28.844000 audit: BPF prog-id=37 op=LOAD Jul 14 23:09:28.840668 systemd[1]: Starting audit-rules.service... Jul 14 23:09:28.841626 systemd[1]: Starting clean-ca-certificates.service... Jul 14 23:09:28.842578 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 14 23:09:28.843995 systemd[1]: Starting systemd-resolved.service... Jul 14 23:09:28.846453 systemd[1]: Starting systemd-timesyncd.service... Jul 14 23:09:28.847555 systemd[1]: Starting systemd-update-utmp.service... Jul 14 23:09:28.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.850000 audit[1195]: SYSTEM_BOOT pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.850318 systemd[1]: Finished clean-ca-certificates.service. Jul 14 23:09:28.851463 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:09:28.852248 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:09:28.853046 systemd[1]: Starting modprobe@loop.service... Jul 14 23:09:28.853346 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.853421 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:09:28.853735 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 23:09:28.857641 systemd[1]: Finished systemd-update-utmp.service. Jul 14 23:09:28.858863 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.858914 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:09:28.858963 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 23:09:28.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.860526 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:09:28.860619 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:09:28.860934 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:09:28.861010 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:09:28.861254 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:09:28.864232 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:09:28.865197 systemd[1]: Starting modprobe@drm.service... Jul 14 23:09:28.866205 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:09:28.866385 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.866758 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:09:28.868794 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 14 23:09:28.869113 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 23:09:28.870046 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:09:28.870743 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:09:28.871338 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:09:28.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.873884 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:09:28.873971 systemd[1]: Finished modprobe@loop.service. Jul 14 23:09:28.874393 systemd[1]: Finished ensure-sysext.service. Jul 14 23:09:28.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.882245 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 23:09:28.882329 systemd[1]: Finished modprobe@drm.service. Jul 14 23:09:28.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.883727 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:09:28.883802 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:09:28.883975 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.889604 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 14 23:09:28.904000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 14 23:09:28.904000 audit[1216]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeb5a12b70 a2=420 a3=0 items=0 ppid=1189 pid=1216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:09:28.904000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 14 23:09:28.905866 augenrules[1216]: No rules Jul 14 23:09:28.906572 systemd[1]: Finished audit-rules.service. Jul 14 23:09:28.907574 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:28.907584 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:28.913146 systemd-resolved[1193]: Positive Trust Anchors: Jul 14 23:09:28.913155 systemd-resolved[1193]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 23:09:28.913190 systemd-resolved[1193]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 23:09:28.930684 systemd[1]: Started systemd-timesyncd.service. Jul 14 23:09:28.930841 systemd[1]: Reached target time-set.target. Jul 14 23:10:55.759827 systemd-timesyncd[1194]: Contacted time server 23.186.168.131:123 (0.flatcar.pool.ntp.org). Jul 14 23:10:55.760098 systemd-timesyncd[1194]: Initial clock synchronization to Mon 2025-07-14 23:10:55.759679 UTC. Jul 14 23:10:55.769477 systemd-resolved[1193]: Defaulting to hostname 'linux'. Jul 14 23:10:55.770530 systemd[1]: Started systemd-resolved.service. Jul 14 23:10:55.770680 systemd[1]: Reached target network.target. Jul 14 23:10:55.770779 systemd[1]: Reached target nss-lookup.target. Jul 14 23:10:55.819285 ldconfig[1088]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 14 23:10:55.833843 systemd[1]: Finished ldconfig.service. Jul 14 23:10:55.834914 systemd[1]: Starting systemd-update-done.service... Jul 14 23:10:55.839104 systemd[1]: Finished systemd-update-done.service. Jul 14 23:10:55.839268 systemd[1]: Reached target sysinit.target. Jul 14 23:10:55.839411 systemd[1]: Started motdgen.path. Jul 14 23:10:55.839546 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 14 23:10:55.839730 systemd[1]: Started logrotate.timer. Jul 14 23:10:55.839889 systemd[1]: Started mdadm.timer. Jul 14 23:10:55.839975 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 14 23:10:55.840069 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 14 23:10:55.840094 systemd[1]: Reached target paths.target. Jul 14 23:10:55.840178 systemd[1]: Reached target timers.target. Jul 14 23:10:55.840435 systemd[1]: Listening on dbus.socket. Jul 14 23:10:55.841321 systemd[1]: Starting docker.socket... Jul 14 23:10:55.843188 systemd[1]: Listening on sshd.socket. Jul 14 23:10:55.843349 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:10:55.843604 systemd[1]: Listening on docker.socket. Jul 14 23:10:55.843736 systemd[1]: Reached target sockets.target. Jul 14 23:10:55.843835 systemd[1]: Reached target basic.target. Jul 14 23:10:55.843953 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 23:10:55.843975 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 23:10:55.844650 systemd[1]: Starting containerd.service... Jul 14 23:10:55.845582 systemd[1]: Starting dbus.service... Jul 14 23:10:55.846669 systemd[1]: Starting enable-oem-cloudinit.service... Jul 14 23:10:55.849010 jq[1227]: false Jul 14 23:10:55.849094 systemd[1]: Starting extend-filesystems.service... Jul 14 23:10:55.849235 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 14 23:10:55.850240 systemd[1]: Starting motdgen.service... Jul 14 23:10:55.851412 systemd[1]: Starting prepare-helm.service... Jul 14 23:10:55.852229 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 14 23:10:55.853292 systemd[1]: Starting sshd-keygen.service... Jul 14 23:10:55.855872 systemd[1]: Starting systemd-logind.service... Jul 14 23:10:55.855981 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:10:55.856021 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 14 23:10:55.856453 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 14 23:10:55.857180 systemd[1]: Starting update-engine.service... Jul 14 23:10:55.858568 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 14 23:10:55.859729 systemd[1]: Starting vmtoolsd.service... Jul 14 23:10:55.863068 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 14 23:10:55.863192 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 14 23:10:55.863796 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 14 23:10:55.863898 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 14 23:10:55.870759 jq[1237]: true Jul 14 23:10:55.885099 extend-filesystems[1228]: Found loop1 Jul 14 23:10:55.885802 extend-filesystems[1228]: Found sda Jul 14 23:10:55.885974 extend-filesystems[1228]: Found sda1 Jul 14 23:10:55.886132 extend-filesystems[1228]: Found sda2 Jul 14 23:10:55.886272 extend-filesystems[1228]: Found sda3 Jul 14 23:10:55.886408 extend-filesystems[1228]: Found usr Jul 14 23:10:55.886519 jq[1252]: true Jul 14 23:10:55.887130 extend-filesystems[1228]: Found sda4 Jul 14 23:10:55.887335 extend-filesystems[1228]: Found sda6 Jul 14 23:10:55.887501 systemd[1]: Started vmtoolsd.service. Jul 14 23:10:55.889187 tar[1245]: linux-amd64/LICENSE Jul 14 23:10:55.889187 tar[1245]: linux-amd64/helm Jul 14 23:10:55.891967 extend-filesystems[1228]: Found sda7 Jul 14 23:10:55.891967 extend-filesystems[1228]: Found sda9 Jul 14 23:10:55.891967 extend-filesystems[1228]: Checking size of /dev/sda9 Jul 14 23:10:55.902057 systemd[1]: motdgen.service: Deactivated successfully. Jul 14 23:10:55.902186 systemd[1]: Finished motdgen.service. Jul 14 23:10:55.913405 extend-filesystems[1228]: Old size kept for /dev/sda9 Jul 14 23:10:55.914572 extend-filesystems[1228]: Found sr0 Jul 14 23:10:55.915255 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 14 23:10:55.915367 systemd[1]: Finished extend-filesystems.service. Jul 14 23:10:55.922063 dbus-daemon[1226]: [system] SELinux support is enabled Jul 14 23:10:55.922154 systemd[1]: Started dbus.service. Jul 14 23:10:55.923505 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 14 23:10:55.923524 systemd[1]: Reached target system-config.target. Jul 14 23:10:55.923638 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 14 23:10:55.923650 systemd[1]: Reached target user-config.target. Jul 14 23:10:55.937008 kernel: NET: Registered PF_VSOCK protocol family Jul 14 23:10:55.950104 env[1247]: time="2025-07-14T23:10:55.949855807Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 14 23:10:55.952301 update_engine[1236]: I0714 23:10:55.951737 1236 main.cc:92] Flatcar Update Engine starting Jul 14 23:10:55.953809 systemd[1]: Started update-engine.service. Jul 14 23:10:55.955161 systemd[1]: Started locksmithd.service. Jul 14 23:10:55.956364 update_engine[1236]: I0714 23:10:55.956344 1236 update_check_scheduler.cc:74] Next update check in 11m12s Jul 14 23:10:55.964211 bash[1284]: Updated "/home/core/.ssh/authorized_keys" Jul 14 23:10:55.965132 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 14 23:10:55.988952 systemd-logind[1235]: Watching system buttons on /dev/input/event1 (Power Button) Jul 14 23:10:55.988966 systemd-logind[1235]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 14 23:10:55.989061 systemd-logind[1235]: New seat seat0. Jul 14 23:10:55.990191 systemd[1]: Started systemd-logind.service. Jul 14 23:10:56.002016 env[1247]: time="2025-07-14T23:10:56.001985636Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 14 23:10:56.002089 env[1247]: time="2025-07-14T23:10:56.002072291Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 14 23:10:56.003073 env[1247]: time="2025-07-14T23:10:56.003018102Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.187-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 14 23:10:56.003073 env[1247]: time="2025-07-14T23:10:56.003069328Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 14 23:10:56.003272 env[1247]: time="2025-07-14T23:10:56.003256331Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 23:10:56.003272 env[1247]: time="2025-07-14T23:10:56.003268543Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 14 23:10:56.003326 env[1247]: time="2025-07-14T23:10:56.003276312Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 14 23:10:56.003326 env[1247]: time="2025-07-14T23:10:56.003281764Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 14 23:10:56.003362 env[1247]: time="2025-07-14T23:10:56.003327136Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 14 23:10:56.003467 env[1247]: time="2025-07-14T23:10:56.003453076Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 14 23:10:56.003554 env[1247]: time="2025-07-14T23:10:56.003539237Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 23:10:56.003554 env[1247]: time="2025-07-14T23:10:56.003551346Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 14 23:10:56.003606 env[1247]: time="2025-07-14T23:10:56.003579741Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 14 23:10:56.003606 env[1247]: time="2025-07-14T23:10:56.003587273Z" level=info msg="metadata content store policy set" policy=shared Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008349868Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008374866Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008383288Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008405399Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008420262Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008430941Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008438440Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008446179Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008459785Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008472957Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008484243Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008494559Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008562947Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 14 23:10:56.008760 env[1247]: time="2025-07-14T23:10:56.008616370Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010059761Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010089390Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010100076Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010132776Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010140703Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010148037Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010154631Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010161299Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010168887Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010175358Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010181770Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010189267Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010266615Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010281525Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.010774 env[1247]: time="2025-07-14T23:10:56.010294312Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.011109 env[1247]: time="2025-07-14T23:10:56.010305862Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 14 23:10:56.011109 env[1247]: time="2025-07-14T23:10:56.010319406Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 14 23:10:56.011109 env[1247]: time="2025-07-14T23:10:56.010330907Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 14 23:10:56.011109 env[1247]: time="2025-07-14T23:10:56.010347149Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 14 23:10:56.011109 env[1247]: time="2025-07-14T23:10:56.010374664Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 14 23:10:56.011292 env[1247]: time="2025-07-14T23:10:56.010514841Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 14 23:10:56.011292 env[1247]: time="2025-07-14T23:10:56.010553227Z" level=info msg="Connect containerd service" Jul 14 23:10:56.011292 env[1247]: time="2025-07-14T23:10:56.010572788Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 14 23:10:56.013206 env[1247]: time="2025-07-14T23:10:56.011942495Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 23:10:56.013206 env[1247]: time="2025-07-14T23:10:56.012188923Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 14 23:10:56.013206 env[1247]: time="2025-07-14T23:10:56.012218694Z" level=info msg="Start subscribing containerd event" Jul 14 23:10:56.013206 env[1247]: time="2025-07-14T23:10:56.012248805Z" level=info msg="Start recovering state" Jul 14 23:10:56.013206 env[1247]: time="2025-07-14T23:10:56.012299422Z" level=info msg="Start event monitor" Jul 14 23:10:56.013206 env[1247]: time="2025-07-14T23:10:56.012312186Z" level=info msg="Start snapshots syncer" Jul 14 23:10:56.013206 env[1247]: time="2025-07-14T23:10:56.012318912Z" level=info msg="Start cni network conf syncer for default" Jul 14 23:10:56.013206 env[1247]: time="2025-07-14T23:10:56.012328578Z" level=info msg="Start streaming server" Jul 14 23:10:56.013206 env[1247]: time="2025-07-14T23:10:56.012317120Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 14 23:10:56.012458 systemd[1]: Started containerd.service. Jul 14 23:10:56.013443 env[1247]: time="2025-07-14T23:10:56.013264525Z" level=info msg="containerd successfully booted in 0.064181s" Jul 14 23:10:56.175681 sshd_keygen[1251]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 14 23:10:56.195667 systemd[1]: Finished sshd-keygen.service. Jul 14 23:10:56.196906 systemd[1]: Starting issuegen.service... Jul 14 23:10:56.200086 systemd[1]: issuegen.service: Deactivated successfully. Jul 14 23:10:56.200175 systemd[1]: Finished issuegen.service. Jul 14 23:10:56.201291 systemd[1]: Starting systemd-user-sessions.service... Jul 14 23:10:56.212577 systemd[1]: Finished systemd-user-sessions.service. Jul 14 23:10:56.213565 systemd[1]: Started getty@tty1.service. Jul 14 23:10:56.214441 systemd[1]: Started serial-getty@ttyS0.service. Jul 14 23:10:56.214643 systemd[1]: Reached target getty.target. Jul 14 23:10:56.304851 systemd-networkd[1061]: ens192: Gained IPv6LL Jul 14 23:10:56.306269 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 14 23:10:56.306579 systemd[1]: Reached target network-online.target. Jul 14 23:10:56.313950 tar[1245]: linux-amd64/README.md Jul 14 23:10:56.316550 systemd[1]: Starting kubelet.service... Jul 14 23:10:56.320054 systemd[1]: Finished prepare-helm.service. Jul 14 23:10:56.339363 locksmithd[1285]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 14 23:10:57.843636 systemd[1]: Started kubelet.service. Jul 14 23:10:57.843958 systemd[1]: Reached target multi-user.target. Jul 14 23:10:57.844881 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 14 23:10:57.849320 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 14 23:10:57.849410 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 14 23:10:57.849580 systemd[1]: Startup finished in 924ms (kernel) + 5.155s (initrd) + 6.351s (userspace) = 12.431s. Jul 14 23:10:57.876833 login[1349]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 14 23:10:57.876994 login[1350]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 14 23:10:57.886160 systemd[1]: Created slice user-500.slice. Jul 14 23:10:57.886977 systemd[1]: Starting user-runtime-dir@500.service... Jul 14 23:10:57.892542 systemd-logind[1235]: New session 2 of user core. Jul 14 23:10:57.894719 systemd-logind[1235]: New session 1 of user core. Jul 14 23:10:57.897303 systemd[1]: Finished user-runtime-dir@500.service. Jul 14 23:10:57.898324 systemd[1]: Starting user@500.service... Jul 14 23:10:57.900863 (systemd)[1361]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:10:57.979439 systemd[1361]: Queued start job for default target default.target. Jul 14 23:10:57.980425 systemd[1361]: Reached target paths.target. Jul 14 23:10:57.980532 systemd[1361]: Reached target sockets.target. Jul 14 23:10:57.980612 systemd[1361]: Reached target timers.target. Jul 14 23:10:57.980694 systemd[1361]: Reached target basic.target. Jul 14 23:10:57.980861 systemd[1]: Started user@500.service. Jul 14 23:10:57.981598 systemd[1361]: Reached target default.target. Jul 14 23:10:57.981631 systemd[1361]: Startup finished in 77ms. Jul 14 23:10:57.981797 systemd[1]: Started session-1.scope. Jul 14 23:10:57.982452 systemd[1]: Started session-2.scope. Jul 14 23:10:58.459787 kubelet[1358]: E0714 23:10:58.459761 1358 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:10:58.460909 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:10:58.460980 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:11:08.711618 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 14 23:11:08.711806 systemd[1]: Stopped kubelet.service. Jul 14 23:11:08.713038 systemd[1]: Starting kubelet.service... Jul 14 23:11:09.032604 systemd[1]: Started kubelet.service. Jul 14 23:11:09.057966 kubelet[1389]: E0714 23:11:09.057944 1389 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:11:09.060076 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:11:09.060155 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:11:19.310885 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 14 23:11:19.311033 systemd[1]: Stopped kubelet.service. Jul 14 23:11:19.312243 systemd[1]: Starting kubelet.service... Jul 14 23:11:19.536151 systemd[1]: Started kubelet.service. Jul 14 23:11:19.624803 kubelet[1398]: E0714 23:11:19.624721 1398 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:11:19.626302 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:11:19.626401 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:11:25.996652 systemd[1]: Created slice system-sshd.slice. Jul 14 23:11:25.997824 systemd[1]: Started sshd@0-139.178.70.104:22-139.178.89.65:50708.service. Jul 14 23:11:26.045240 sshd[1405]: Accepted publickey for core from 139.178.89.65 port 50708 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.046173 sshd[1405]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.049429 systemd-logind[1235]: New session 3 of user core. Jul 14 23:11:26.050083 systemd[1]: Started session-3.scope. Jul 14 23:11:26.100610 systemd[1]: Started sshd@1-139.178.70.104:22-139.178.89.65:50718.service. Jul 14 23:11:26.144652 sshd[1410]: Accepted publickey for core from 139.178.89.65 port 50718 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.145632 sshd[1410]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.147934 systemd-logind[1235]: New session 4 of user core. Jul 14 23:11:26.148668 systemd[1]: Started session-4.scope. Jul 14 23:11:26.202802 sshd[1410]: pam_unix(sshd:session): session closed for user core Jul 14 23:11:26.202954 systemd[1]: Started sshd@2-139.178.70.104:22-139.178.89.65:50720.service. Jul 14 23:11:26.205214 systemd[1]: sshd@1-139.178.70.104:22-139.178.89.65:50718.service: Deactivated successfully. Jul 14 23:11:26.205672 systemd[1]: session-4.scope: Deactivated successfully. Jul 14 23:11:26.206635 systemd-logind[1235]: Session 4 logged out. Waiting for processes to exit. Jul 14 23:11:26.207393 systemd-logind[1235]: Removed session 4. Jul 14 23:11:26.243800 sshd[1415]: Accepted publickey for core from 139.178.89.65 port 50720 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.244644 sshd[1415]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.247641 systemd-logind[1235]: New session 5 of user core. Jul 14 23:11:26.248166 systemd[1]: Started session-5.scope. Jul 14 23:11:26.296186 sshd[1415]: pam_unix(sshd:session): session closed for user core Jul 14 23:11:26.299209 systemd[1]: Started sshd@3-139.178.70.104:22-139.178.89.65:50728.service. Jul 14 23:11:26.299575 systemd[1]: sshd@2-139.178.70.104:22-139.178.89.65:50720.service: Deactivated successfully. Jul 14 23:11:26.300088 systemd[1]: session-5.scope: Deactivated successfully. Jul 14 23:11:26.300611 systemd-logind[1235]: Session 5 logged out. Waiting for processes to exit. Jul 14 23:11:26.302910 systemd-logind[1235]: Removed session 5. Jul 14 23:11:26.341722 sshd[1421]: Accepted publickey for core from 139.178.89.65 port 50728 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.342703 sshd[1421]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.346578 systemd[1]: Started session-6.scope. Jul 14 23:11:26.346884 systemd-logind[1235]: New session 6 of user core. Jul 14 23:11:26.399373 sshd[1421]: pam_unix(sshd:session): session closed for user core Jul 14 23:11:26.401825 systemd[1]: sshd@3-139.178.70.104:22-139.178.89.65:50728.service: Deactivated successfully. Jul 14 23:11:26.402228 systemd[1]: session-6.scope: Deactivated successfully. Jul 14 23:11:26.402739 systemd-logind[1235]: Session 6 logged out. Waiting for processes to exit. Jul 14 23:11:26.403461 systemd[1]: Started sshd@4-139.178.70.104:22-139.178.89.65:50740.service. Jul 14 23:11:26.404078 systemd-logind[1235]: Removed session 6. Jul 14 23:11:26.445033 sshd[1428]: Accepted publickey for core from 139.178.89.65 port 50740 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.446272 sshd[1428]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.449428 systemd-logind[1235]: New session 7 of user core. Jul 14 23:11:26.450032 systemd[1]: Started session-7.scope. Jul 14 23:11:26.510088 sudo[1431]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 14 23:11:26.510227 sudo[1431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 23:11:26.515855 dbus-daemon[1226]: \xd0\xdd\u000dw\xeaU: received setenforce notice (enforcing=-681722640) Jul 14 23:11:26.516847 sudo[1431]: pam_unix(sudo:session): session closed for user root Jul 14 23:11:26.518510 sshd[1428]: pam_unix(sshd:session): session closed for user core Jul 14 23:11:26.520565 systemd[1]: sshd@4-139.178.70.104:22-139.178.89.65:50740.service: Deactivated successfully. Jul 14 23:11:26.520939 systemd[1]: session-7.scope: Deactivated successfully. Jul 14 23:11:26.521316 systemd-logind[1235]: Session 7 logged out. Waiting for processes to exit. Jul 14 23:11:26.521998 systemd[1]: Started sshd@5-139.178.70.104:22-139.178.89.65:50756.service. Jul 14 23:11:26.522666 systemd-logind[1235]: Removed session 7. Jul 14 23:11:26.560585 sshd[1435]: Accepted publickey for core from 139.178.89.65 port 50756 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.561489 sshd[1435]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.564717 systemd-logind[1235]: New session 8 of user core. Jul 14 23:11:26.565258 systemd[1]: Started session-8.scope. Jul 14 23:11:26.615576 sudo[1439]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 14 23:11:26.615717 sudo[1439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 23:11:26.617922 sudo[1439]: pam_unix(sudo:session): session closed for user root Jul 14 23:11:26.620781 sudo[1438]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 14 23:11:26.620905 sudo[1438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 23:11:26.626260 systemd[1]: Stopping audit-rules.service... Jul 14 23:11:26.626000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 23:11:26.627793 kernel: kauditd_printk_skb: 284 callbacks suppressed Jul 14 23:11:26.627826 kernel: audit: type=1305 audit(1752534686.626:205): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 23:11:26.626000 audit[1442]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc67ec5f20 a2=420 a3=0 items=0 ppid=1 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.629605 auditctl[1442]: No rules Jul 14 23:11:26.633236 kernel: audit: type=1300 audit(1752534686.626:205): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc67ec5f20 a2=420 a3=0 items=0 ppid=1 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.633278 kernel: audit: type=1327 audit(1752534686.626:205): proctitle=2F7362696E2F617564697463746C002D44 Jul 14 23:11:26.626000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 14 23:11:26.629837 systemd[1]: audit-rules.service: Deactivated successfully. Jul 14 23:11:26.629930 systemd[1]: Stopped audit-rules.service. Jul 14 23:11:26.633568 systemd[1]: Starting audit-rules.service... Jul 14 23:11:26.636207 kernel: audit: type=1131 audit(1752534686.628:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.644703 augenrules[1459]: No rules Jul 14 23:11:26.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.644000 audit[1438]: USER_END pid=1438 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.645627 sudo[1438]: pam_unix(sudo:session): session closed for user root Jul 14 23:11:26.645204 systemd[1]: Finished audit-rules.service. Jul 14 23:11:26.648252 systemd[1]: Started sshd@6-139.178.70.104:22-139.178.89.65:50770.service. Jul 14 23:11:26.651908 kernel: audit: type=1130 audit(1752534686.644:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.651941 kernel: audit: type=1106 audit(1752534686.644:208): pid=1438 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.651959 kernel: audit: type=1104 audit(1752534686.644:209): pid=1438 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.644000 audit[1438]: CRED_DISP pid=1438 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.651556 sshd[1435]: pam_unix(sshd:session): session closed for user core Jul 14 23:11:26.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.104:22-139.178.89.65:50770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.657205 kernel: audit: type=1130 audit(1752534686.645:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.104:22-139.178.89.65:50770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.659556 systemd[1]: sshd@5-139.178.70.104:22-139.178.89.65:50756.service: Deactivated successfully. Jul 14 23:11:26.660013 systemd[1]: session-8.scope: Deactivated successfully. Jul 14 23:11:26.660630 systemd-logind[1235]: Session 8 logged out. Waiting for processes to exit. Jul 14 23:11:26.658000 audit[1435]: USER_END pid=1435 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.661144 systemd-logind[1235]: Removed session 8. Jul 14 23:11:26.658000 audit[1435]: CRED_DISP pid=1435 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.667433 kernel: audit: type=1106 audit(1752534686.658:211): pid=1435 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.667463 kernel: audit: type=1104 audit(1752534686.658:212): pid=1435 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-139.178.70.104:22-139.178.89.65:50756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.695000 audit[1464]: USER_ACCT pid=1464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.696135 sshd[1464]: Accepted publickey for core from 139.178.89.65 port 50770 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.695000 audit[1464]: CRED_ACQ pid=1464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.696000 audit[1464]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0853a020 a2=3 a3=0 items=0 ppid=1 pid=1464 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.696000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:11:26.697127 sshd[1464]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.700075 systemd[1]: Started session-9.scope. Jul 14 23:11:26.700782 systemd-logind[1235]: New session 9 of user core. Jul 14 23:11:26.702000 audit[1464]: USER_START pid=1464 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.703000 audit[1467]: CRED_ACQ pid=1467 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.749561 sudo[1468]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 14 23:11:26.749701 sudo[1468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 23:11:26.748000 audit[1468]: USER_ACCT pid=1468 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.748000 audit[1468]: CRED_REFR pid=1468 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.749000 audit[1468]: USER_START pid=1468 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.763679 systemd[1]: Starting docker.service... Jul 14 23:11:26.786725 env[1479]: time="2025-07-14T23:11:26.786694662Z" level=info msg="Starting up" Jul 14 23:11:26.787552 env[1479]: time="2025-07-14T23:11:26.787538500Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 23:11:26.787552 env[1479]: time="2025-07-14T23:11:26.787549808Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 23:11:26.787616 env[1479]: time="2025-07-14T23:11:26.787562967Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 23:11:26.787616 env[1479]: time="2025-07-14T23:11:26.787569147Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 23:11:26.788455 env[1479]: time="2025-07-14T23:11:26.788442856Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 23:11:26.788506 env[1479]: time="2025-07-14T23:11:26.788495911Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 23:11:26.788556 env[1479]: time="2025-07-14T23:11:26.788545398Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 23:11:26.788596 env[1479]: time="2025-07-14T23:11:26.788587308Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 23:11:26.791846 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3967059080-merged.mount: Deactivated successfully. Jul 14 23:11:26.808097 env[1479]: time="2025-07-14T23:11:26.808075208Z" level=info msg="Loading containers: start." Jul 14 23:11:26.853000 audit[1509]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1509 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.853000 audit[1509]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffdd1f8f270 a2=0 a3=7ffdd1f8f25c items=0 ppid=1479 pid=1509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.853000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 14 23:11:26.854000 audit[1511]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1511 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.854000 audit[1511]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd4818daa0 a2=0 a3=7ffd4818da8c items=0 ppid=1479 pid=1511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.854000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 14 23:11:26.855000 audit[1513]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1513 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.855000 audit[1513]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc6636ae40 a2=0 a3=7ffc6636ae2c items=0 ppid=1479 pid=1513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.855000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 23:11:26.856000 audit[1515]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1515 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.856000 audit[1515]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdd4cdfaf0 a2=0 a3=7ffdd4cdfadc items=0 ppid=1479 pid=1515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.856000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 23:11:26.858000 audit[1517]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1517 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.858000 audit[1517]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffedcb9fee0 a2=0 a3=7ffedcb9fecc items=0 ppid=1479 pid=1517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.858000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 14 23:11:26.871000 audit[1522]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1522 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.871000 audit[1522]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe1f2f5740 a2=0 a3=7ffe1f2f572c items=0 ppid=1479 pid=1522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.871000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 14 23:11:26.873000 audit[1524]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1524 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.873000 audit[1524]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffffa46e2f0 a2=0 a3=7ffffa46e2dc items=0 ppid=1479 pid=1524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.873000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 14 23:11:26.875000 audit[1526]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1526 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.875000 audit[1526]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffc19957d80 a2=0 a3=7ffc19957d6c items=0 ppid=1479 pid=1526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.875000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 14 23:11:26.876000 audit[1528]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1528 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.876000 audit[1528]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffea3c01fe0 a2=0 a3=7ffea3c01fcc items=0 ppid=1479 pid=1528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.876000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:11:26.880000 audit[1532]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1532 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.880000 audit[1532]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffda3902650 a2=0 a3=7ffda390263c items=0 ppid=1479 pid=1532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.880000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:11:26.885000 audit[1533]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1533 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.885000 audit[1533]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd45cac980 a2=0 a3=7ffd45cac96c items=0 ppid=1479 pid=1533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.885000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:11:26.893781 kernel: Initializing XFRM netlink socket Jul 14 23:11:26.916677 env[1479]: time="2025-07-14T23:11:26.916657068Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 14 23:11:26.931000 audit[1541]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1541 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.931000 audit[1541]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc4821ec80 a2=0 a3=7ffc4821ec6c items=0 ppid=1479 pid=1541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.931000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 14 23:11:26.939000 audit[1544]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1544 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.939000 audit[1544]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc60b77de0 a2=0 a3=7ffc60b77dcc items=0 ppid=1479 pid=1544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.939000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 14 23:11:26.941000 audit[1547]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1547 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.941000 audit[1547]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffbbed8ce0 a2=0 a3=7fffbbed8ccc items=0 ppid=1479 pid=1547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.941000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 14 23:11:26.942000 audit[1549]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1549 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.942000 audit[1549]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdb0573d40 a2=0 a3=7ffdb0573d2c items=0 ppid=1479 pid=1549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.942000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 14 23:11:26.944000 audit[1551]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1551 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.944000 audit[1551]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffd82c82360 a2=0 a3=7ffd82c8234c items=0 ppid=1479 pid=1551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.944000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 14 23:11:26.946000 audit[1553]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1553 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.946000 audit[1553]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fff60c373c0 a2=0 a3=7fff60c373ac items=0 ppid=1479 pid=1553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.946000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 14 23:11:26.947000 audit[1555]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1555 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.947000 audit[1555]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffcd92a7390 a2=0 a3=7ffcd92a737c items=0 ppid=1479 pid=1555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.947000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 14 23:11:26.953000 audit[1558]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1558 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.953000 audit[1558]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fffce73fc20 a2=0 a3=7fffce73fc0c items=0 ppid=1479 pid=1558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.953000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 14 23:11:26.955000 audit[1560]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1560 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.955000 audit[1560]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffdee16a300 a2=0 a3=7ffdee16a2ec items=0 ppid=1479 pid=1560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.955000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 23:11:26.956000 audit[1562]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1562 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.956000 audit[1562]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffd358def90 a2=0 a3=7ffd358def7c items=0 ppid=1479 pid=1562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.956000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 23:11:26.957000 audit[1564]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1564 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.957000 audit[1564]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd188e7a00 a2=0 a3=7ffd188e79ec items=0 ppid=1479 pid=1564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.957000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 14 23:11:26.958826 systemd-networkd[1061]: docker0: Link UP Jul 14 23:11:26.961000 audit[1568]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1568 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.961000 audit[1568]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe28d816a0 a2=0 a3=7ffe28d8168c items=0 ppid=1479 pid=1568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.961000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:11:26.967000 audit[1569]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1569 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.967000 audit[1569]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffe2680960 a2=0 a3=7fffe268094c items=0 ppid=1479 pid=1569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.967000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:11:26.968577 env[1479]: time="2025-07-14T23:11:26.968558381Z" level=info msg="Loading containers: done." Jul 14 23:11:26.973990 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck304553445-merged.mount: Deactivated successfully. Jul 14 23:11:26.978777 env[1479]: time="2025-07-14T23:11:26.978734257Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 14 23:11:26.978880 env[1479]: time="2025-07-14T23:11:26.978865533Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 14 23:11:26.978931 env[1479]: time="2025-07-14T23:11:26.978919581Z" level=info msg="Daemon has completed initialization" Jul 14 23:11:26.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.984538 systemd[1]: Started docker.service. Jul 14 23:11:26.990350 env[1479]: time="2025-07-14T23:11:26.990308581Z" level=info msg="API listen on /run/docker.sock" Jul 14 23:11:27.583649 env[1247]: time="2025-07-14T23:11:27.583621675Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\"" Jul 14 23:11:28.055082 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount228794074.mount: Deactivated successfully. Jul 14 23:11:29.482773 env[1247]: time="2025-07-14T23:11:29.482726942Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:29.502183 env[1247]: time="2025-07-14T23:11:29.502144829Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:29.514183 env[1247]: time="2025-07-14T23:11:29.514151847Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:29.524346 env[1247]: time="2025-07-14T23:11:29.524320355Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e8ae58675899e946fabe38425f2b3bfd33120b7930d05b5898de97c81a7f6137,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:29.525039 env[1247]: time="2025-07-14T23:11:29.525015059Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\" returns image reference \"sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e\"" Jul 14 23:11:29.525428 env[1247]: time="2025-07-14T23:11:29.525413148Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\"" Jul 14 23:11:29.877162 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 14 23:11:29.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:29.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:29.877386 systemd[1]: Stopped kubelet.service. Jul 14 23:11:29.878929 systemd[1]: Starting kubelet.service... Jul 14 23:11:29.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:29.968193 systemd[1]: Started kubelet.service. Jul 14 23:11:30.048846 kubelet[1607]: E0714 23:11:30.048808 1607 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:11:30.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 23:11:30.050097 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:11:30.050186 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:11:31.796151 env[1247]: time="2025-07-14T23:11:31.796121153Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:31.809315 env[1247]: time="2025-07-14T23:11:31.809279291Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:31.817366 env[1247]: time="2025-07-14T23:11:31.817340209Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:31.822396 env[1247]: time="2025-07-14T23:11:31.822367792Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:2236e72a4be5dcc9c04600353ff8849db1557f5364947c520ff05471ae719081,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:31.823143 env[1247]: time="2025-07-14T23:11:31.823122662Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\" returns image reference \"sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2\"" Jul 14 23:11:31.823531 env[1247]: time="2025-07-14T23:11:31.823517133Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\"" Jul 14 23:11:33.414561 env[1247]: time="2025-07-14T23:11:33.414513167Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:33.442705 env[1247]: time="2025-07-14T23:11:33.442679865Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:33.456096 env[1247]: time="2025-07-14T23:11:33.456075348Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:33.478276 env[1247]: time="2025-07-14T23:11:33.478247081Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:304c28303133be7d927973bc9bd6c83945b3735c59d283c25b63d5b9ed53bca3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:33.478837 env[1247]: time="2025-07-14T23:11:33.478814379Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\" returns image reference \"sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b\"" Jul 14 23:11:33.479200 env[1247]: time="2025-07-14T23:11:33.479188496Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\"" Jul 14 23:11:34.535185 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2772509918.mount: Deactivated successfully. Jul 14 23:11:35.063853 env[1247]: time="2025-07-14T23:11:35.063815684Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:35.097308 env[1247]: time="2025-07-14T23:11:35.097276582Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:35.113513 env[1247]: time="2025-07-14T23:11:35.113488395Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:35.127802 env[1247]: time="2025-07-14T23:11:35.127622263Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4796ef3e43efa5ed2a5b015c18f81d3c2fe3aea36f555ea643cc01827eb65e51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:35.128075 env[1247]: time="2025-07-14T23:11:35.128047386Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\" returns image reference \"sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19\"" Jul 14 23:11:35.128808 env[1247]: time="2025-07-14T23:11:35.128786130Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 14 23:11:36.027466 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1746682577.mount: Deactivated successfully. Jul 14 23:11:37.565153 env[1247]: time="2025-07-14T23:11:37.565107001Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:37.605595 env[1247]: time="2025-07-14T23:11:37.605564841Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:37.635082 env[1247]: time="2025-07-14T23:11:37.634797779Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:37.649648 env[1247]: time="2025-07-14T23:11:37.649621966Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:37.650301 env[1247]: time="2025-07-14T23:11:37.650274959Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Jul 14 23:11:37.650713 env[1247]: time="2025-07-14T23:11:37.650691513Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 14 23:11:38.481059 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4179043962.mount: Deactivated successfully. Jul 14 23:11:38.548337 env[1247]: time="2025-07-14T23:11:38.548302291Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:38.562742 env[1247]: time="2025-07-14T23:11:38.562715333Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:38.568560 env[1247]: time="2025-07-14T23:11:38.568536642Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:38.570950 env[1247]: time="2025-07-14T23:11:38.570923698Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:38.571354 env[1247]: time="2025-07-14T23:11:38.571328897Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 14 23:11:38.572138 env[1247]: time="2025-07-14T23:11:38.572115871Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 14 23:11:39.192400 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2126435203.mount: Deactivated successfully. Jul 14 23:11:40.090593 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 14 23:11:40.101241 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 14 23:11:40.101283 kernel: audit: type=1130 audit(1752534700.089:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:40.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:40.090761 systemd[1]: Stopped kubelet.service. Jul 14 23:11:40.092002 systemd[1]: Starting kubelet.service... Jul 14 23:11:40.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:40.106893 kernel: audit: type=1131 audit(1752534700.089:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:41.431144 update_engine[1236]: I0714 23:11:41.430866 1236 update_attempter.cc:509] Updating boot flags... Jul 14 23:11:42.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:42.175855 systemd[1]: Started kubelet.service. Jul 14 23:11:42.179788 kernel: audit: type=1130 audit(1752534702.174:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:42.218072 kubelet[1634]: E0714 23:11:42.218048 1634 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:11:42.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 23:11:42.219231 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:11:42.219305 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:11:42.222764 kernel: audit: type=1131 audit(1752534702.217:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 23:11:44.046543 env[1247]: time="2025-07-14T23:11:44.046507919Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:44.066625 env[1247]: time="2025-07-14T23:11:44.066574301Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:44.080784 env[1247]: time="2025-07-14T23:11:44.080762395Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:44.092554 env[1247]: time="2025-07-14T23:11:44.092528457Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:44.093102 env[1247]: time="2025-07-14T23:11:44.093077724Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Jul 14 23:11:48.343366 systemd[1]: Stopped kubelet.service. Jul 14 23:11:48.348947 kernel: audit: type=1130 audit(1752534708.342:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:48.349013 kernel: audit: type=1131 audit(1752534708.342:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:48.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:48.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:48.345009 systemd[1]: Starting kubelet.service... Jul 14 23:11:48.364786 systemd[1]: Reloading. Jul 14 23:11:48.426801 /usr/lib/systemd/system-generators/torcx-generator[1688]: time="2025-07-14T23:11:48Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 23:11:48.427782 /usr/lib/systemd/system-generators/torcx-generator[1688]: time="2025-07-14T23:11:48Z" level=info msg="torcx already run" Jul 14 23:11:48.487488 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 23:11:48.487499 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 23:11:48.499636 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 23:11:48.546076 kernel: audit: type=1400 audit(1752534708.540:257): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.546145 kernel: audit: type=1400 audit(1752534708.540:258): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.551068 kernel: audit: type=1400 audit(1752534708.540:259): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.551108 kernel: audit: type=1400 audit(1752534708.540:260): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.553589 kernel: audit: type=1400 audit(1752534708.540:261): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.556058 kernel: audit: type=1400 audit(1752534708.540:262): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.558518 kernel: audit: type=1400 audit(1752534708.540:263): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.560995 kernel: audit: type=1400 audit(1752534708.540:264): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.545000 audit: BPF prog-id=43 op=LOAD Jul 14 23:11:48.545000 audit: BPF prog-id=41 op=UNLOAD Jul 14 23:11:48.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.550000 audit: BPF prog-id=44 op=LOAD Jul 14 23:11:48.550000 audit: BPF prog-id=27 op=UNLOAD Jul 14 23:11:48.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.552000 audit: BPF prog-id=45 op=LOAD Jul 14 23:11:48.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.552000 audit: BPF prog-id=46 op=LOAD Jul 14 23:11:48.552000 audit: BPF prog-id=28 op=UNLOAD Jul 14 23:11:48.552000 audit: BPF prog-id=29 op=UNLOAD Jul 14 23:11:48.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.557000 audit: BPF prog-id=47 op=LOAD Jul 14 23:11:48.557000 audit: BPF prog-id=36 op=UNLOAD Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit: BPF prog-id=48 op=LOAD Jul 14 23:11:48.562000 audit: BPF prog-id=30 op=UNLOAD Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit: BPF prog-id=49 op=LOAD Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit: BPF prog-id=50 op=LOAD Jul 14 23:11:48.562000 audit: BPF prog-id=31 op=UNLOAD Jul 14 23:11:48.562000 audit: BPF prog-id=32 op=UNLOAD Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit: BPF prog-id=51 op=LOAD Jul 14 23:11:48.562000 audit: BPF prog-id=37 op=UNLOAD Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit: BPF prog-id=52 op=LOAD Jul 14 23:11:48.563000 audit: BPF prog-id=38 op=UNLOAD Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit: BPF prog-id=53 op=LOAD Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.563000 audit: BPF prog-id=54 op=LOAD Jul 14 23:11:48.563000 audit: BPF prog-id=39 op=UNLOAD Jul 14 23:11:48.563000 audit: BPF prog-id=40 op=UNLOAD Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit: BPF prog-id=55 op=LOAD Jul 14 23:11:48.564000 audit: BPF prog-id=33 op=UNLOAD Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit: BPF prog-id=56 op=LOAD Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:48.564000 audit: BPF prog-id=57 op=LOAD Jul 14 23:11:48.564000 audit: BPF prog-id=34 op=UNLOAD Jul 14 23:11:48.564000 audit: BPF prog-id=35 op=UNLOAD Jul 14 23:11:48.599941 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 14 23:11:48.600001 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 14 23:11:48.600335 systemd[1]: Stopped kubelet.service. Jul 14 23:11:48.603303 systemd[1]: Starting kubelet.service... Jul 14 23:11:48.599000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 23:11:51.625655 systemd[1]: Started kubelet.service. Jul 14 23:11:51.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:51.767571 kubelet[1749]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 23:11:51.767571 kubelet[1749]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 14 23:11:51.767571 kubelet[1749]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 23:11:51.767880 kubelet[1749]: I0714 23:11:51.767616 1749 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 23:11:52.150764 kubelet[1749]: I0714 23:11:52.150734 1749 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 14 23:11:52.150764 kubelet[1749]: I0714 23:11:52.150761 1749 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 23:11:52.150932 kubelet[1749]: I0714 23:11:52.150919 1749 server.go:956] "Client rotation is on, will bootstrap in background" Jul 14 23:11:52.183692 kubelet[1749]: I0714 23:11:52.183664 1749 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 23:11:52.221920 kubelet[1749]: E0714 23:11:52.221897 1749 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://139.178.70.104:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.104:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 14 23:11:52.238450 kubelet[1749]: E0714 23:11:52.238433 1749 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 23:11:52.238541 kubelet[1749]: I0714 23:11:52.238530 1749 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 23:11:52.250074 kubelet[1749]: I0714 23:11:52.250060 1749 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 23:11:52.250369 kubelet[1749]: I0714 23:11:52.250352 1749 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 23:11:52.250529 kubelet[1749]: I0714 23:11:52.250416 1749 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 23:11:52.250626 kubelet[1749]: I0714 23:11:52.250617 1749 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 23:11:52.250676 kubelet[1749]: I0714 23:11:52.250670 1749 container_manager_linux.go:303] "Creating device plugin manager" Jul 14 23:11:52.262063 kubelet[1749]: I0714 23:11:52.262050 1749 state_mem.go:36] "Initialized new in-memory state store" Jul 14 23:11:52.321536 kubelet[1749]: I0714 23:11:52.321514 1749 kubelet.go:480] "Attempting to sync node with API server" Jul 14 23:11:52.321663 kubelet[1749]: I0714 23:11:52.321654 1749 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 23:11:52.321737 kubelet[1749]: I0714 23:11:52.321729 1749 kubelet.go:386] "Adding apiserver pod source" Jul 14 23:11:52.321809 kubelet[1749]: I0714 23:11:52.321801 1749 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 23:11:52.393810 kubelet[1749]: E0714 23:11:52.393782 1749 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://139.178.70.104:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.104:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 14 23:11:52.393927 kubelet[1749]: E0714 23:11:52.393858 1749 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://139.178.70.104:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.104:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 14 23:11:52.394120 kubelet[1749]: I0714 23:11:52.394106 1749 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 23:11:52.394510 kubelet[1749]: I0714 23:11:52.394492 1749 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 14 23:11:52.395362 kubelet[1749]: W0714 23:11:52.395341 1749 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 14 23:11:52.398783 kubelet[1749]: I0714 23:11:52.398765 1749 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 14 23:11:52.398874 kubelet[1749]: I0714 23:11:52.398811 1749 server.go:1289] "Started kubelet" Jul 14 23:11:52.399548 kubelet[1749]: I0714 23:11:52.399482 1749 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 23:11:52.400375 kubelet[1749]: I0714 23:11:52.400364 1749 server.go:317] "Adding debug handlers to kubelet server" Jul 14 23:11:52.406000 audit[1749]: AVC avc: denied { mac_admin } for pid=1749 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.406000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:52.406000 audit[1749]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000876c90 a1=c0008b2528 a2=c000876c60 a3=25 items=0 ppid=1 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.406000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:52.408654 kubelet[1749]: I0714 23:11:52.408636 1749 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 23:11:52.407000 audit[1749]: AVC avc: denied { mac_admin } for pid=1749 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.407000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:52.407000 audit[1749]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008802c0 a1=c0008b2540 a2=c000876d20 a3=25 items=0 ppid=1 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.407000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:52.408869 kubelet[1749]: I0714 23:11:52.408859 1749 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 14 23:11:52.408972 kubelet[1749]: I0714 23:11:52.408964 1749 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 23:11:52.410186 kubelet[1749]: I0714 23:11:52.410146 1749 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 23:11:52.410297 kubelet[1749]: I0714 23:11:52.410285 1749 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 23:11:52.412000 audit[1764]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1764 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:52.412000 audit[1764]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe501045f0 a2=0 a3=7ffe501045dc items=0 ppid=1749 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.412000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 23:11:52.413000 audit[1765]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:52.413000 audit[1765]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1a7b3140 a2=0 a3=7fff1a7b312c items=0 ppid=1749 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.413000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 23:11:52.415171 kubelet[1749]: I0714 23:11:52.415158 1749 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 23:11:52.416370 kubelet[1749]: E0714 23:11:52.410387 1749 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://139.178.70.104:6443/api/v1/namespaces/default/events\": dial tcp 139.178.70.104:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.185241091d12296f default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-14 23:11:52.398784879 +0000 UTC m=+0.768338791,LastTimestamp:2025-07-14 23:11:52.398784879 +0000 UTC m=+0.768338791,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 14 23:11:52.417301 kubelet[1749]: I0714 23:11:52.417294 1749 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 14 23:11:52.417570 kubelet[1749]: E0714 23:11:52.417561 1749 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:11:52.417890 kubelet[1749]: I0714 23:11:52.417882 1749 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 14 23:11:52.417966 kubelet[1749]: I0714 23:11:52.417960 1749 reconciler.go:26] "Reconciler: start to sync state" Jul 14 23:11:52.418248 kubelet[1749]: E0714 23:11:52.418237 1749 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://139.178.70.104:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.104:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 14 23:11:52.417000 audit[1767]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1767 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:52.417000 audit[1767]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd8b96a840 a2=0 a3=7ffd8b96a82c items=0 ppid=1749 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.417000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 23:11:52.418605 kubelet[1749]: I0714 23:11:52.418594 1749 factory.go:223] Registration of the systemd container factory successfully Jul 14 23:11:52.418694 kubelet[1749]: I0714 23:11:52.418684 1749 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 23:11:52.418883 kubelet[1749]: E0714 23:11:52.418874 1749 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 14 23:11:52.419000 audit[1769]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1769 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:52.419000 audit[1769]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcc3b8dca0 a2=0 a3=7ffcc3b8dc8c items=0 ppid=1749 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.419000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 23:11:52.425319 kubelet[1749]: E0714 23:11:52.425293 1749 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.104:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.104:6443: connect: connection refused" interval="200ms" Jul 14 23:11:52.425533 kubelet[1749]: I0714 23:11:52.425522 1749 factory.go:223] Registration of the containerd container factory successfully Jul 14 23:11:52.436740 kubelet[1749]: I0714 23:11:52.436726 1749 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 14 23:11:52.436851 kubelet[1749]: I0714 23:11:52.436841 1749 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 14 23:11:52.436907 kubelet[1749]: I0714 23:11:52.436900 1749 state_mem.go:36] "Initialized new in-memory state store" Jul 14 23:11:52.438000 audit[1776]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1776 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:52.438000 audit[1776]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffe40de0280 a2=0 a3=7ffe40de026c items=0 ppid=1749 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.438000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 14 23:11:52.439868 kubelet[1749]: I0714 23:11:52.439852 1749 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 14 23:11:52.439000 audit[1778]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1778 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:52.439000 audit[1778]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff35721860 a2=0 a3=7fff3572184c items=0 ppid=1749 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.439000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 23:11:52.439000 audit[1777]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1777 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:11:52.439000 audit[1777]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd2fe1bdd0 a2=0 a3=10e3 items=0 ppid=1749 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.439000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 23:11:52.440000 audit[1779]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1779 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:52.440000 audit[1779]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc70a883c0 a2=0 a3=7ffc70a883ac items=0 ppid=1749 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.440000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 23:11:52.440000 audit[1780]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:11:52.440000 audit[1780]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff78a18bb0 a2=0 a3=7fff78a18b9c items=0 ppid=1749 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.440000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 23:11:52.441000 audit[1781]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1781 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:52.441000 audit[1781]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc07bf5450 a2=0 a3=7ffc07bf543c items=0 ppid=1749 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.441000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 23:11:52.441000 audit[1782]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1782 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:11:52.441000 audit[1782]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffe5cd235a0 a2=0 a3=7ffe5cd2358c items=0 ppid=1749 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.441000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 23:11:52.442000 audit[1783]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1783 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:11:52.442000 audit[1783]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc8ec2e360 a2=0 a3=7ffc8ec2e34c items=0 ppid=1749 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.442000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 23:11:52.445390 kubelet[1749]: I0714 23:11:52.440823 1749 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 14 23:11:52.445390 kubelet[1749]: I0714 23:11:52.440832 1749 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 14 23:11:52.445390 kubelet[1749]: I0714 23:11:52.440843 1749 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 14 23:11:52.445390 kubelet[1749]: I0714 23:11:52.440847 1749 kubelet.go:2436] "Starting kubelet main sync loop" Jul 14 23:11:52.445390 kubelet[1749]: E0714 23:11:52.440868 1749 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 23:11:52.445390 kubelet[1749]: E0714 23:11:52.442362 1749 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://139.178.70.104:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.104:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 14 23:11:52.450090 kubelet[1749]: I0714 23:11:52.450077 1749 policy_none.go:49] "None policy: Start" Jul 14 23:11:52.450162 kubelet[1749]: I0714 23:11:52.450154 1749 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 14 23:11:52.450218 kubelet[1749]: I0714 23:11:52.450206 1749 state_mem.go:35] "Initializing new in-memory state store" Jul 14 23:11:52.468352 systemd[1]: Created slice kubepods.slice. Jul 14 23:11:52.471363 systemd[1]: Created slice kubepods-burstable.slice. Jul 14 23:11:52.473481 systemd[1]: Created slice kubepods-besteffort.slice. Jul 14 23:11:52.479450 kubelet[1749]: E0714 23:11:52.479434 1749 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 14 23:11:52.478000 audit[1749]: AVC avc: denied { mac_admin } for pid=1749 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.478000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:52.478000 audit[1749]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b79d40 a1=c0006e0570 a2=c000b79d10 a3=25 items=0 ppid=1 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.478000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:52.481117 kubelet[1749]: E0714 23:11:52.481105 1749 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 14 23:11:52.481246 kubelet[1749]: I0714 23:11:52.481238 1749 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 23:11:52.481313 kubelet[1749]: I0714 23:11:52.481293 1749 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 23:11:52.481520 kubelet[1749]: I0714 23:11:52.481509 1749 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 23:11:52.481867 kubelet[1749]: E0714 23:11:52.481852 1749 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 14 23:11:52.481912 kubelet[1749]: E0714 23:11:52.481880 1749 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 14 23:11:52.552880 systemd[1]: Created slice kubepods-burstable-podd8f920f2897f5af5d2b088419c68fd23.slice. Jul 14 23:11:52.568293 kubelet[1749]: E0714 23:11:52.568274 1749 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:11:52.571402 systemd[1]: Created slice kubepods-burstable-pod84b858ec27c8b2738b1d9ff9927e0dcb.slice. Jul 14 23:11:52.573047 kubelet[1749]: E0714 23:11:52.572893 1749 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:11:52.579712 systemd[1]: Created slice kubepods-burstable-pod834ee54f1daa06092e339273649eb5ea.slice. Jul 14 23:11:52.580875 kubelet[1749]: E0714 23:11:52.580860 1749 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:11:52.582532 kubelet[1749]: I0714 23:11:52.582518 1749 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 23:11:52.582778 kubelet[1749]: E0714 23:11:52.582762 1749 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.104:6443/api/v1/nodes\": dial tcp 139.178.70.104:6443: connect: connection refused" node="localhost" Jul 14 23:11:52.618180 kubelet[1749]: I0714 23:11:52.618149 1749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:52.618180 kubelet[1749]: I0714 23:11:52.618184 1749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:52.618335 kubelet[1749]: I0714 23:11:52.618203 1749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:52.618335 kubelet[1749]: I0714 23:11:52.618219 1749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d8f920f2897f5af5d2b088419c68fd23-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"d8f920f2897f5af5d2b088419c68fd23\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:52.618335 kubelet[1749]: I0714 23:11:52.618232 1749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d8f920f2897f5af5d2b088419c68fd23-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"d8f920f2897f5af5d2b088419c68fd23\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:52.618335 kubelet[1749]: I0714 23:11:52.618246 1749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:52.618335 kubelet[1749]: I0714 23:11:52.618259 1749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 14 23:11:52.618465 kubelet[1749]: I0714 23:11:52.618272 1749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d8f920f2897f5af5d2b088419c68fd23-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"d8f920f2897f5af5d2b088419c68fd23\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:52.618465 kubelet[1749]: I0714 23:11:52.618284 1749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:52.625870 kubelet[1749]: E0714 23:11:52.625851 1749 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.104:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.104:6443: connect: connection refused" interval="400ms" Jul 14 23:11:52.785781 kubelet[1749]: I0714 23:11:52.783840 1749 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 23:11:52.785781 kubelet[1749]: E0714 23:11:52.784018 1749 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.104:6443/api/v1/nodes\": dial tcp 139.178.70.104:6443: connect: connection refused" node="localhost" Jul 14 23:11:52.870063 env[1247]: time="2025-07-14T23:11:52.870023837Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:d8f920f2897f5af5d2b088419c68fd23,Namespace:kube-system,Attempt:0,}" Jul 14 23:11:52.873793 env[1247]: time="2025-07-14T23:11:52.873773443Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,}" Jul 14 23:11:52.881331 env[1247]: time="2025-07-14T23:11:52.881313583Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,}" Jul 14 23:11:53.026138 kubelet[1749]: E0714 23:11:53.026113 1749 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.104:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.104:6443: connect: connection refused" interval="800ms" Jul 14 23:11:53.185511 kubelet[1749]: I0714 23:11:53.185333 1749 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 23:11:53.185596 kubelet[1749]: E0714 23:11:53.185554 1749 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.104:6443/api/v1/nodes\": dial tcp 139.178.70.104:6443: connect: connection refused" node="localhost" Jul 14 23:11:53.495988 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount509485240.mount: Deactivated successfully. Jul 14 23:11:53.517012 env[1247]: time="2025-07-14T23:11:53.516918973Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:53.517582 env[1247]: time="2025-07-14T23:11:53.517566685Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:53.518859 env[1247]: time="2025-07-14T23:11:53.518844510Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:53.519302 env[1247]: time="2025-07-14T23:11:53.519290150Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:53.520156 env[1247]: time="2025-07-14T23:11:53.520136443Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:53.520582 env[1247]: time="2025-07-14T23:11:53.520564815Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:53.521049 env[1247]: time="2025-07-14T23:11:53.521036295Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:53.522231 env[1247]: time="2025-07-14T23:11:53.522216872Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:53.522722 env[1247]: time="2025-07-14T23:11:53.522710039Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:53.523220 env[1247]: time="2025-07-14T23:11:53.523203811Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:53.525580 env[1247]: time="2025-07-14T23:11:53.525555860Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:53.529671 env[1247]: time="2025-07-14T23:11:53.529584694Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:53.549191 kubelet[1749]: E0714 23:11:53.549163 1749 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://139.178.70.104:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.104:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 14 23:11:53.554875 env[1247]: time="2025-07-14T23:11:53.552416011Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:11:53.554875 env[1247]: time="2025-07-14T23:11:53.552452035Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:11:53.554875 env[1247]: time="2025-07-14T23:11:53.552459434Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:11:53.554875 env[1247]: time="2025-07-14T23:11:53.552539838Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4930db5f0c340e1ae09245e8b04aa46ab9ac348516e5b757f45fa54ba80bb31b pid=1794 runtime=io.containerd.runc.v2 Jul 14 23:11:53.562233 env[1247]: time="2025-07-14T23:11:53.561644756Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:11:53.562233 env[1247]: time="2025-07-14T23:11:53.561667103Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:11:53.562233 env[1247]: time="2025-07-14T23:11:53.561673951Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:11:53.562233 env[1247]: time="2025-07-14T23:11:53.561741424Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c6f5473f9ea4a26cf52440966858c09bcc703256bf066fe9a2ba2b68c73912bf pid=1830 runtime=io.containerd.runc.v2 Jul 14 23:11:53.562420 env[1247]: time="2025-07-14T23:11:53.559993671Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:11:53.562420 env[1247]: time="2025-07-14T23:11:53.560020703Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:11:53.562420 env[1247]: time="2025-07-14T23:11:53.560028299Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:11:53.562420 env[1247]: time="2025-07-14T23:11:53.560154671Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d293173e2e8fa325312f975f431fa5f4d8de59c1b4deaa735aa05e3845125bbd pid=1811 runtime=io.containerd.runc.v2 Jul 14 23:11:53.563733 kubelet[1749]: E0714 23:11:53.563699 1749 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://139.178.70.104:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.104:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 14 23:11:53.569618 systemd[1]: Started cri-containerd-4930db5f0c340e1ae09245e8b04aa46ab9ac348516e5b757f45fa54ba80bb31b.scope. Jul 14 23:11:53.582471 kernel: kauditd_printk_skb: 214 callbacks suppressed Jul 14 23:11:53.582541 kernel: audit: type=1400 audit(1752534713.580:446): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.584765 kernel: audit: type=1400 audit(1752534713.580:447): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.589502 kernel: audit: type=1400 audit(1752534713.580:448): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.589546 kernel: audit: type=1400 audit(1752534713.580:449): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.599287 kernel: audit: type=1400 audit(1752534713.580:450): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.599374 kernel: audit: type=1400 audit(1752534713.580:451): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.602330 systemd[1]: Started cri-containerd-d293173e2e8fa325312f975f431fa5f4d8de59c1b4deaa735aa05e3845125bbd.scope. Jul 14 23:11:53.603175 kubelet[1749]: E0714 23:11:53.603117 1749 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://139.178.70.104:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.104:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 14 23:11:53.611322 kernel: audit: type=1400 audit(1752534713.580:452): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.611391 kernel: audit: type=1400 audit(1752534713.580:453): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.604271 systemd[1]: Started cri-containerd-c6f5473f9ea4a26cf52440966858c09bcc703256bf066fe9a2ba2b68c73912bf.scope. Jul 14 23:11:53.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.617481 kernel: audit: type=1400 audit(1752534713.580:454): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.617515 kernel: audit: type=1400 audit(1752534713.582:455): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.582000 audit: BPF prog-id=58 op=LOAD Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1794 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333064623566306333343065316165303932343565386230346161 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1794 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333064623566306333343065316165303932343565386230346161 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit: BPF prog-id=59 op=LOAD Jul 14 23:11:53.591000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003d6000 items=0 ppid=1794 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333064623566306333343065316165303932343565386230346161 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit: BPF prog-id=60 op=LOAD Jul 14 23:11:53.591000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003d6048 items=0 ppid=1794 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333064623566306333343065316165303932343565386230346161 Jul 14 23:11:53.591000 audit: BPF prog-id=60 op=UNLOAD Jul 14 23:11:53.591000 audit: BPF prog-id=59 op=UNLOAD Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.591000 audit: BPF prog-id=61 op=LOAD Jul 14 23:11:53.591000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003d6458 items=0 ppid=1794 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333064623566306333343065316165303932343565386230346161 Jul 14 23:11:53.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.620000 audit: BPF prog-id=62 op=LOAD Jul 14 23:11:53.621000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.621000 audit[1841]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1811 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432393331373365326538666133323533313266393735663433316661 Jul 14 23:11:53.621000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.621000 audit[1841]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1811 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432393331373365326538666133323533313266393735663433316661 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit: BPF prog-id=63 op=LOAD Jul 14 23:11:53.624000 audit[1841]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00028aee0 items=0 ppid=1811 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432393331373365326538666133323533313266393735663433316661 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit: BPF prog-id=64 op=LOAD Jul 14 23:11:53.624000 audit[1841]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00028af28 items=0 ppid=1811 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432393331373365326538666133323533313266393735663433316661 Jul 14 23:11:53.624000 audit: BPF prog-id=64 op=UNLOAD Jul 14 23:11:53.624000 audit: BPF prog-id=63 op=UNLOAD Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { perfmon } for pid=1841 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit[1841]: AVC avc: denied { bpf } for pid=1841 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.624000 audit: BPF prog-id=65 op=LOAD Jul 14 23:11:53.624000 audit[1841]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00028b338 items=0 ppid=1811 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432393331373365326538666133323533313266393735663433316661 Jul 14 23:11:53.634341 env[1247]: time="2025-07-14T23:11:53.634244014Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,} returns sandbox id \"4930db5f0c340e1ae09245e8b04aa46ab9ac348516e5b757f45fa54ba80bb31b\"" Jul 14 23:11:53.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit: BPF prog-id=66 op=LOAD Jul 14 23:11:53.637000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit[1845]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1830 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336663534373366396561346132366366353234343039363638353863 Jul 14 23:11:53.637000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit[1845]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1830 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336663534373366396561346132366366353234343039363638353863 Jul 14 23:11:53.637000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.637000 audit: BPF prog-id=67 op=LOAD Jul 14 23:11:53.637000 audit[1845]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000210c70 items=0 ppid=1830 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336663534373366396561346132366366353234343039363638353863 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit: BPF prog-id=68 op=LOAD Jul 14 23:11:53.638000 audit[1845]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000210cb8 items=0 ppid=1830 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.638000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336663534373366396561346132366366353234343039363638353863 Jul 14 23:11:53.638000 audit: BPF prog-id=68 op=UNLOAD Jul 14 23:11:53.638000 audit: BPF prog-id=67 op=UNLOAD Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { perfmon } for pid=1845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit[1845]: AVC avc: denied { bpf } for pid=1845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.638000 audit: BPF prog-id=69 op=LOAD Jul 14 23:11:53.638000 audit[1845]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002110c8 items=0 ppid=1830 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.638000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336663534373366396561346132366366353234343039363638353863 Jul 14 23:11:53.643549 env[1247]: time="2025-07-14T23:11:53.643506839Z" level=info msg="CreateContainer within sandbox \"4930db5f0c340e1ae09245e8b04aa46ab9ac348516e5b757f45fa54ba80bb31b\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 14 23:11:53.661775 env[1247]: time="2025-07-14T23:11:53.661750842Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:d8f920f2897f5af5d2b088419c68fd23,Namespace:kube-system,Attempt:0,} returns sandbox id \"d293173e2e8fa325312f975f431fa5f4d8de59c1b4deaa735aa05e3845125bbd\"" Jul 14 23:11:53.665787 env[1247]: time="2025-07-14T23:11:53.665764017Z" level=info msg="CreateContainer within sandbox \"d293173e2e8fa325312f975f431fa5f4d8de59c1b4deaa735aa05e3845125bbd\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 14 23:11:53.668134 env[1247]: time="2025-07-14T23:11:53.668111750Z" level=info msg="CreateContainer within sandbox \"4930db5f0c340e1ae09245e8b04aa46ab9ac348516e5b757f45fa54ba80bb31b\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"8e19483e70f734639e6e7a5048be3f1892b1090d87f01c70617ef8704aa90ad4\"" Jul 14 23:11:53.668548 env[1247]: time="2025-07-14T23:11:53.668535475Z" level=info msg="StartContainer for \"8e19483e70f734639e6e7a5048be3f1892b1090d87f01c70617ef8704aa90ad4\"" Jul 14 23:11:53.675292 env[1247]: time="2025-07-14T23:11:53.675267486Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,} returns sandbox id \"c6f5473f9ea4a26cf52440966858c09bcc703256bf066fe9a2ba2b68c73912bf\"" Jul 14 23:11:53.677047 env[1247]: time="2025-07-14T23:11:53.676731059Z" level=info msg="CreateContainer within sandbox \"d293173e2e8fa325312f975f431fa5f4d8de59c1b4deaa735aa05e3845125bbd\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"532f3bf32d77ec06ffd6d76ddd15d73b417391eeac152f85ab02fe91c8a9570f\"" Jul 14 23:11:53.677339 env[1247]: time="2025-07-14T23:11:53.677327447Z" level=info msg="StartContainer for \"532f3bf32d77ec06ffd6d76ddd15d73b417391eeac152f85ab02fe91c8a9570f\"" Jul 14 23:11:53.677864 env[1247]: time="2025-07-14T23:11:53.677848909Z" level=info msg="CreateContainer within sandbox \"c6f5473f9ea4a26cf52440966858c09bcc703256bf066fe9a2ba2b68c73912bf\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 14 23:11:53.687722 systemd[1]: Started cri-containerd-8e19483e70f734639e6e7a5048be3f1892b1090d87f01c70617ef8704aa90ad4.scope. Jul 14 23:11:53.692162 env[1247]: time="2025-07-14T23:11:53.692137164Z" level=info msg="CreateContainer within sandbox \"c6f5473f9ea4a26cf52440966858c09bcc703256bf066fe9a2ba2b68c73912bf\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"ff9dd5d6be471e5400946bc9807d009656848f808451d06da60e9fbd585a5324\"" Jul 14 23:11:53.692740 env[1247]: time="2025-07-14T23:11:53.692530577Z" level=info msg="StartContainer for \"ff9dd5d6be471e5400946bc9807d009656848f808451d06da60e9fbd585a5324\"" Jul 14 23:11:53.698587 systemd[1]: Started cri-containerd-532f3bf32d77ec06ffd6d76ddd15d73b417391eeac152f85ab02fe91c8a9570f.scope. Jul 14 23:11:53.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.703000 audit: BPF prog-id=70 op=LOAD Jul 14 23:11:53.704000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.704000 audit[1920]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1794 pid=1920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313934383365373066373334363339653665376135303438626533 Jul 14 23:11:53.704000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.704000 audit[1920]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1794 pid=1920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313934383365373066373334363339653665376135303438626533 Jul 14 23:11:53.704000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.704000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.704000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.704000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.704000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.704000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.704000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.704000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.704000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.704000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.704000 audit: BPF prog-id=71 op=LOAD Jul 14 23:11:53.704000 audit[1920]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000108270 items=0 ppid=1794 pid=1920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313934383365373066373334363339653665376135303438626533 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit: BPF prog-id=72 op=LOAD Jul 14 23:11:53.705000 audit[1920]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001082b8 items=0 ppid=1794 pid=1920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313934383365373066373334363339653665376135303438626533 Jul 14 23:11:53.705000 audit: BPF prog-id=72 op=UNLOAD Jul 14 23:11:53.705000 audit: BPF prog-id=71 op=UNLOAD Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { perfmon } for pid=1920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit[1920]: AVC avc: denied { bpf } for pid=1920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.705000 audit: BPF prog-id=73 op=LOAD Jul 14 23:11:53.705000 audit[1920]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001086c8 items=0 ppid=1794 pid=1920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313934383365373066373334363339653665376135303438626533 Jul 14 23:11:53.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.714000 audit: BPF prog-id=74 op=LOAD Jul 14 23:11:53.714000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.714000 audit[1933]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1811 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533326633626633326437376563303666666436643736646464313564 Jul 14 23:11:53.714000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.714000 audit[1933]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1811 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533326633626633326437376563303666666436643736646464313564 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit: BPF prog-id=75 op=LOAD Jul 14 23:11:53.715000 audit[1933]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025750 items=0 ppid=1811 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533326633626633326437376563303666666436643736646464313564 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.715000 audit: BPF prog-id=76 op=LOAD Jul 14 23:11:53.715000 audit[1933]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025798 items=0 ppid=1811 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533326633626633326437376563303666666436643736646464313564 Jul 14 23:11:53.715000 audit: BPF prog-id=76 op=UNLOAD Jul 14 23:11:53.715000 audit: BPF prog-id=75 op=UNLOAD Jul 14 23:11:53.716000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.716000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.716000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.716000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.716000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.716000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.716000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.716000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.716000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.716000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.716000 audit: BPF prog-id=77 op=LOAD Jul 14 23:11:53.716000 audit[1933]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025ba8 items=0 ppid=1811 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533326633626633326437376563303666666436643736646464313564 Jul 14 23:11:53.727103 systemd[1]: Started cri-containerd-ff9dd5d6be471e5400946bc9807d009656848f808451d06da60e9fbd585a5324.scope. Jul 14 23:11:53.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.743000 audit: BPF prog-id=78 op=LOAD Jul 14 23:11:53.745000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.745000 audit[1961]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1830 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.746323 env[1247]: time="2025-07-14T23:11:53.746302578Z" level=info msg="StartContainer for \"8e19483e70f734639e6e7a5048be3f1892b1090d87f01c70617ef8704aa90ad4\" returns successfully" Jul 14 23:11:53.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666396464356436626534373165353430303934366263393830376430 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1830 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666396464356436626534373165353430303934366263393830376430 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit: BPF prog-id=79 op=LOAD Jul 14 23:11:53.746000 audit[1961]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00027dec0 items=0 ppid=1830 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666396464356436626534373165353430303934366263393830376430 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit: BPF prog-id=80 op=LOAD Jul 14 23:11:53.746000 audit[1961]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00027df08 items=0 ppid=1830 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666396464356436626534373165353430303934366263393830376430 Jul 14 23:11:53.746000 audit: BPF prog-id=80 op=UNLOAD Jul 14 23:11:53.746000 audit: BPF prog-id=79 op=UNLOAD Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { perfmon } for pid=1961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit[1961]: AVC avc: denied { bpf } for pid=1961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:53.746000 audit: BPF prog-id=81 op=LOAD Jul 14 23:11:53.746000 audit[1961]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ee318 items=0 ppid=1830 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:53.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666396464356436626534373165353430303934366263393830376430 Jul 14 23:11:53.757187 env[1247]: time="2025-07-14T23:11:53.757163123Z" level=info msg="StartContainer for \"532f3bf32d77ec06ffd6d76ddd15d73b417391eeac152f85ab02fe91c8a9570f\" returns successfully" Jul 14 23:11:53.775393 env[1247]: time="2025-07-14T23:11:53.775368678Z" level=info msg="StartContainer for \"ff9dd5d6be471e5400946bc9807d009656848f808451d06da60e9fbd585a5324\" returns successfully" Jul 14 23:11:53.826688 kubelet[1749]: E0714 23:11:53.826657 1749 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.104:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.104:6443: connect: connection refused" interval="1.6s" Jul 14 23:11:53.986993 kubelet[1749]: I0714 23:11:53.986726 1749 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 23:11:53.986993 kubelet[1749]: E0714 23:11:53.986969 1749 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.104:6443/api/v1/nodes\": dial tcp 139.178.70.104:6443: connect: connection refused" node="localhost" Jul 14 23:11:54.011598 kubelet[1749]: E0714 23:11:54.011528 1749 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://139.178.70.104:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.104:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 14 23:11:54.242592 kubelet[1749]: E0714 23:11:54.242570 1749 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://139.178.70.104:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.104:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 14 23:11:54.445753 kubelet[1749]: E0714 23:11:54.445727 1749 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:11:54.452764 kubelet[1749]: E0714 23:11:54.451947 1749 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:11:54.456104 kubelet[1749]: E0714 23:11:54.456086 1749 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:11:55.225000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:55.225000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000357500 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:11:55.225000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:11:55.225000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:55.225000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000158820 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:11:55.225000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:11:55.457132 kubelet[1749]: E0714 23:11:55.457116 1749 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:11:55.457525 kubelet[1749]: E0714 23:11:55.457491 1749 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 23:11:55.557000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:55.557000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c004b4ec90 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:11:55.557000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:11:55.557000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:55.557000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0072454e0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:11:55.557000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:11:55.558000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:55.558000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c004b4f740 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:11:55.558000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:11:55.571000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:55.571000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c006910750 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:11:55.571000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:11:55.582000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:55.582000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=48 a1=c006a85da0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:11:55.582000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:11:55.582000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:55.582000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=48 a1=c00416d920 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:11:55.582000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:11:55.587824 kubelet[1749]: I0714 23:11:55.587806 1749 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 23:11:55.614797 kubelet[1749]: E0714 23:11:55.614773 1749 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 14 23:11:55.719358 kubelet[1749]: I0714 23:11:55.719336 1749 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 14 23:11:55.719358 kubelet[1749]: E0714 23:11:55.719357 1749 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 14 23:11:55.728225 kubelet[1749]: E0714 23:11:55.728201 1749 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:11:55.829124 kubelet[1749]: E0714 23:11:55.829044 1749 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:11:55.929919 kubelet[1749]: E0714 23:11:55.929893 1749 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:11:56.030562 kubelet[1749]: E0714 23:11:56.030510 1749 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:11:56.130809 kubelet[1749]: E0714 23:11:56.130786 1749 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:11:56.231678 kubelet[1749]: E0714 23:11:56.231648 1749 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:11:56.332355 kubelet[1749]: E0714 23:11:56.332332 1749 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:11:56.432957 kubelet[1749]: E0714 23:11:56.432885 1749 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:11:56.519989 kubelet[1749]: I0714 23:11:56.519962 1749 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:56.525724 kubelet[1749]: E0714 23:11:56.525705 1749 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:56.525724 kubelet[1749]: I0714 23:11:56.525722 1749 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 23:11:56.526666 kubelet[1749]: E0714 23:11:56.526651 1749 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 14 23:11:56.526666 kubelet[1749]: I0714 23:11:56.526664 1749 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:56.527525 kubelet[1749]: E0714 23:11:56.527512 1749 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:57.395100 kubelet[1749]: I0714 23:11:57.394947 1749 apiserver.go:52] "Watching apiserver" Jul 14 23:11:57.418504 kubelet[1749]: I0714 23:11:57.418485 1749 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 14 23:11:57.438302 systemd[1]: Reloading. Jul 14 23:11:57.494461 /usr/lib/systemd/system-generators/torcx-generator[2046]: time="2025-07-14T23:11:57Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 23:11:57.495534 /usr/lib/systemd/system-generators/torcx-generator[2046]: time="2025-07-14T23:11:57Z" level=info msg="torcx already run" Jul 14 23:11:57.539817 kubelet[1749]: I0714 23:11:57.539800 1749 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 23:11:57.556784 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 23:11:57.556897 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 23:11:57.569399 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 23:11:57.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.619000 audit: BPF prog-id=82 op=LOAD Jul 14 23:11:57.619000 audit: BPF prog-id=43 op=UNLOAD Jul 14 23:11:57.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.620000 audit: BPF prog-id=83 op=LOAD Jul 14 23:11:57.620000 audit: BPF prog-id=44 op=UNLOAD Jul 14 23:11:57.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit: BPF prog-id=84 op=LOAD Jul 14 23:11:57.622000 audit: BPF prog-id=70 op=UNLOAD Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit: BPF prog-id=85 op=LOAD Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.623000 audit: BPF prog-id=86 op=LOAD Jul 14 23:11:57.623000 audit: BPF prog-id=45 op=UNLOAD Jul 14 23:11:57.623000 audit: BPF prog-id=46 op=UNLOAD Jul 14 23:11:57.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.623000 audit: BPF prog-id=87 op=LOAD Jul 14 23:11:57.624000 audit: BPF prog-id=74 op=UNLOAD Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit: BPF prog-id=88 op=LOAD Jul 14 23:11:57.624000 audit: BPF prog-id=47 op=UNLOAD Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.624000 audit: BPF prog-id=89 op=LOAD Jul 14 23:11:57.624000 audit: BPF prog-id=58 op=UNLOAD Jul 14 23:11:57.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.625000 audit: BPF prog-id=90 op=LOAD Jul 14 23:11:57.625000 audit: BPF prog-id=62 op=UNLOAD Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit: BPF prog-id=91 op=LOAD Jul 14 23:11:57.626000 audit: BPF prog-id=48 op=UNLOAD Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit: BPF prog-id=92 op=LOAD Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.626000 audit: BPF prog-id=93 op=LOAD Jul 14 23:11:57.626000 audit: BPF prog-id=49 op=UNLOAD Jul 14 23:11:57.626000 audit: BPF prog-id=50 op=UNLOAD Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit: BPF prog-id=94 op=LOAD Jul 14 23:11:57.627000 audit: BPF prog-id=51 op=UNLOAD Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.627000 audit: BPF prog-id=95 op=LOAD Jul 14 23:11:57.628000 audit: BPF prog-id=52 op=UNLOAD Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit: BPF prog-id=96 op=LOAD Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit: BPF prog-id=97 op=LOAD Jul 14 23:11:57.628000 audit: BPF prog-id=53 op=UNLOAD Jul 14 23:11:57.628000 audit: BPF prog-id=54 op=UNLOAD Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.628000 audit: BPF prog-id=98 op=LOAD Jul 14 23:11:57.628000 audit: BPF prog-id=66 op=UNLOAD Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit: BPF prog-id=99 op=LOAD Jul 14 23:11:57.629000 audit: BPF prog-id=55 op=UNLOAD Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit: BPF prog-id=100 op=LOAD Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit: BPF prog-id=101 op=LOAD Jul 14 23:11:57.629000 audit: BPF prog-id=56 op=UNLOAD Jul 14 23:11:57.629000 audit: BPF prog-id=57 op=UNLOAD Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.629000 audit: BPF prog-id=102 op=LOAD Jul 14 23:11:57.629000 audit: BPF prog-id=78 op=UNLOAD Jul 14 23:11:57.640834 systemd[1]: Stopping kubelet.service... Jul 14 23:11:57.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:57.667925 systemd[1]: kubelet.service: Deactivated successfully. Jul 14 23:11:57.668071 systemd[1]: Stopped kubelet.service. Jul 14 23:11:57.669575 systemd[1]: Starting kubelet.service... Jul 14 23:11:58.507901 systemd[1]: Started kubelet.service. Jul 14 23:11:58.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:58.566359 kubelet[2110]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 23:11:58.566649 kubelet[2110]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 14 23:11:58.566691 kubelet[2110]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 23:11:58.566808 kubelet[2110]: I0714 23:11:58.566786 2110 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 23:11:58.574998 kubelet[2110]: I0714 23:11:58.574973 2110 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 14 23:11:58.574998 kubelet[2110]: I0714 23:11:58.574994 2110 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 23:11:58.575147 kubelet[2110]: I0714 23:11:58.575135 2110 server.go:956] "Client rotation is on, will bootstrap in background" Jul 14 23:11:58.575872 kubelet[2110]: I0714 23:11:58.575859 2110 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 14 23:11:58.592648 kubelet[2110]: I0714 23:11:58.592332 2110 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 23:11:58.601047 kubelet[2110]: E0714 23:11:58.601032 2110 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 23:11:58.601142 kubelet[2110]: I0714 23:11:58.601133 2110 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 23:11:58.603126 kubelet[2110]: I0714 23:11:58.603118 2110 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 23:11:58.603351 kubelet[2110]: I0714 23:11:58.603333 2110 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 23:11:58.609640 kubelet[2110]: I0714 23:11:58.603584 2110 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 23:11:58.609752 kubelet[2110]: I0714 23:11:58.609737 2110 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 23:11:58.609806 kubelet[2110]: I0714 23:11:58.609798 2110 container_manager_linux.go:303] "Creating device plugin manager" Jul 14 23:11:58.616255 kubelet[2110]: I0714 23:11:58.616237 2110 state_mem.go:36] "Initialized new in-memory state store" Jul 14 23:11:58.617989 kubelet[2110]: I0714 23:11:58.617966 2110 kubelet.go:480] "Attempting to sync node with API server" Jul 14 23:11:58.617989 kubelet[2110]: I0714 23:11:58.617979 2110 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 23:11:58.618105 kubelet[2110]: I0714 23:11:58.617997 2110 kubelet.go:386] "Adding apiserver pod source" Jul 14 23:11:58.618105 kubelet[2110]: I0714 23:11:58.618006 2110 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 23:11:58.647581 kubelet[2110]: I0714 23:11:58.647562 2110 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 23:11:58.648018 kubelet[2110]: I0714 23:11:58.648008 2110 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 14 23:11:58.654788 kubelet[2110]: I0714 23:11:58.654780 2110 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 14 23:11:58.654863 kubelet[2110]: I0714 23:11:58.654856 2110 server.go:1289] "Started kubelet" Jul 14 23:11:58.664060 kernel: kauditd_printk_skb: 602 callbacks suppressed Jul 14 23:11:58.664107 kernel: audit: type=1400 audit(1752534718.655:808): avc: denied { mac_admin } for pid=2110 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:58.664154 kernel: audit: type=1401 audit(1752534718.655:808): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:58.664169 kernel: audit: type=1300 audit(1752534718.655:808): arch=c000003e syscall=188 success=no exit=-22 a0=c0006f1230 a1=c0005a0d68 a2=c0006f1200 a3=25 items=0 ppid=1 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:58.655000 audit[2110]: AVC avc: denied { mac_admin } for pid=2110 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:58.655000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:58.655000 audit[2110]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0006f1230 a1=c0005a0d68 a2=c0006f1200 a3=25 items=0 ppid=1 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:58.664322 kubelet[2110]: I0714 23:11:58.659785 2110 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 23:11:58.664322 kubelet[2110]: I0714 23:11:58.659817 2110 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 14 23:11:58.664322 kubelet[2110]: I0714 23:11:58.659837 2110 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 23:11:58.655000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:58.667715 kernel: audit: type=1327 audit(1752534718.655:808): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:58.658000 audit[2110]: AVC avc: denied { mac_admin } for pid=2110 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:58.658000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:58.671581 kernel: audit: type=1400 audit(1752534718.658:809): avc: denied { mac_admin } for pid=2110 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:58.671619 kernel: audit: type=1401 audit(1752534718.658:809): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:58.658000 audit[2110]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0004edf60 a1=c0005a0d80 a2=c0006f12c0 a3=25 items=0 ppid=1 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:58.676223 kubelet[2110]: I0714 23:11:58.676169 2110 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 23:11:58.658000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:58.678985 kubelet[2110]: I0714 23:11:58.678976 2110 server.go:317] "Adding debug handlers to kubelet server" Jul 14 23:11:58.679732 kernel: audit: type=1300 audit(1752534718.658:809): arch=c000003e syscall=188 success=no exit=-22 a0=c0004edf60 a1=c0005a0d80 a2=c0006f12c0 a3=25 items=0 ppid=1 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:58.679993 kernel: audit: type=1327 audit(1752534718.658:809): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:58.683493 kubelet[2110]: I0714 23:11:58.683457 2110 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 23:11:58.683742 kubelet[2110]: I0714 23:11:58.683731 2110 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 23:11:58.685102 kubelet[2110]: I0714 23:11:58.685092 2110 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 23:11:58.690472 kubelet[2110]: I0714 23:11:58.689137 2110 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 14 23:11:58.705926 kubelet[2110]: I0714 23:11:58.705895 2110 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 14 23:11:58.707557 kubelet[2110]: I0714 23:11:58.707548 2110 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 14 23:11:58.707643 kubelet[2110]: I0714 23:11:58.707636 2110 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 14 23:11:58.707719 kubelet[2110]: I0714 23:11:58.707710 2110 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 14 23:11:58.707786 kubelet[2110]: I0714 23:11:58.707780 2110 kubelet.go:2436] "Starting kubelet main sync loop" Jul 14 23:11:58.707888 kubelet[2110]: E0714 23:11:58.707876 2110 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 23:11:58.709037 kubelet[2110]: I0714 23:11:58.709025 2110 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 14 23:11:58.709096 kubelet[2110]: I0714 23:11:58.709092 2110 reconciler.go:26] "Reconciler: start to sync state" Jul 14 23:11:58.712722 kubelet[2110]: I0714 23:11:58.712705 2110 factory.go:223] Registration of the containerd container factory successfully Jul 14 23:11:58.712722 kubelet[2110]: I0714 23:11:58.712715 2110 factory.go:223] Registration of the systemd container factory successfully Jul 14 23:11:58.712822 kubelet[2110]: I0714 23:11:58.712769 2110 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 23:11:58.782171 kubelet[2110]: I0714 23:11:58.781601 2110 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 14 23:11:58.782171 kubelet[2110]: I0714 23:11:58.781611 2110 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 14 23:11:58.782171 kubelet[2110]: I0714 23:11:58.781624 2110 state_mem.go:36] "Initialized new in-memory state store" Jul 14 23:11:58.782171 kubelet[2110]: I0714 23:11:58.781709 2110 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 14 23:11:58.782171 kubelet[2110]: I0714 23:11:58.781715 2110 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 14 23:11:58.785868 kubelet[2110]: I0714 23:11:58.785849 2110 policy_none.go:49] "None policy: Start" Jul 14 23:11:58.785868 kubelet[2110]: I0714 23:11:58.785869 2110 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 14 23:11:58.785951 kubelet[2110]: I0714 23:11:58.785879 2110 state_mem.go:35] "Initializing new in-memory state store" Jul 14 23:11:58.785976 kubelet[2110]: I0714 23:11:58.785953 2110 state_mem.go:75] "Updated machine memory state" Jul 14 23:11:58.790546 kubelet[2110]: E0714 23:11:58.790530 2110 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 14 23:11:58.790663 kubelet[2110]: E0714 23:11:58.790652 2110 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 14 23:11:58.790821 kubelet[2110]: I0714 23:11:58.790812 2110 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 23:11:58.790894 kubelet[2110]: I0714 23:11:58.790872 2110 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 23:11:58.789000 audit[2110]: AVC avc: denied { mac_admin } for pid=2110 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:58.791411 kubelet[2110]: I0714 23:11:58.791404 2110 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 23:11:58.793549 kubelet[2110]: E0714 23:11:58.793521 2110 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 14 23:11:58.793763 kernel: audit: type=1400 audit(1752534718.789:810): avc: denied { mac_admin } for pid=2110 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:58.789000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:58.795804 kernel: audit: type=1401 audit(1752534718.789:810): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:58.789000 audit[2110]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00097fe90 a1=c000f16ff0 a2=c00097fe60 a3=25 items=0 ppid=1 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:58.789000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:58.811820 kubelet[2110]: I0714 23:11:58.809248 2110 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:58.811820 kubelet[2110]: I0714 23:11:58.809476 2110 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 23:11:58.811820 kubelet[2110]: I0714 23:11:58.809596 2110 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:58.814427 kubelet[2110]: E0714 23:11:58.813881 2110 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 14 23:11:58.894425 kubelet[2110]: I0714 23:11:58.894411 2110 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 23:11:58.898729 kubelet[2110]: I0714 23:11:58.898707 2110 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 14 23:11:58.898899 kubelet[2110]: I0714 23:11:58.898892 2110 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 14 23:11:58.918460 kubelet[2110]: I0714 23:11:58.918433 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:58.918655 kubelet[2110]: I0714 23:11:58.918640 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:58.918768 kubelet[2110]: I0714 23:11:58.918736 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d8f920f2897f5af5d2b088419c68fd23-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"d8f920f2897f5af5d2b088419c68fd23\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:58.918852 kubelet[2110]: I0714 23:11:58.918844 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d8f920f2897f5af5d2b088419c68fd23-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"d8f920f2897f5af5d2b088419c68fd23\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:58.918926 kubelet[2110]: I0714 23:11:58.918917 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:58.918997 kubelet[2110]: I0714 23:11:58.918989 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:58.919068 kubelet[2110]: I0714 23:11:58.919060 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:58.919142 kubelet[2110]: I0714 23:11:58.919132 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 14 23:11:58.919242 kubelet[2110]: I0714 23:11:58.919231 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d8f920f2897f5af5d2b088419c68fd23-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"d8f920f2897f5af5d2b088419c68fd23\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:59.621560 kubelet[2110]: I0714 23:11:59.621541 2110 apiserver.go:52] "Watching apiserver" Jul 14 23:11:59.663248 kubelet[2110]: I0714 23:11:59.663216 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.663199995 podStartE2EDuration="1.663199995s" podCreationTimestamp="2025-07-14 23:11:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:11:59.659458867 +0000 UTC m=+1.136065378" watchObservedRunningTime="2025-07-14 23:11:59.663199995 +0000 UTC m=+1.139806499" Jul 14 23:11:59.667715 kubelet[2110]: I0714 23:11:59.667690 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.667679905 podStartE2EDuration="2.667679905s" podCreationTimestamp="2025-07-14 23:11:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:11:59.663495857 +0000 UTC m=+1.140102354" watchObservedRunningTime="2025-07-14 23:11:59.667679905 +0000 UTC m=+1.144286409" Jul 14 23:11:59.671708 kubelet[2110]: I0714 23:11:59.671678 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.671669597 podStartE2EDuration="1.671669597s" podCreationTimestamp="2025-07-14 23:11:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:11:59.667981266 +0000 UTC m=+1.144587775" watchObservedRunningTime="2025-07-14 23:11:59.671669597 +0000 UTC m=+1.148276100" Jul 14 23:11:59.709130 kubelet[2110]: I0714 23:11:59.709113 2110 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 14 23:11:59.771435 kubelet[2110]: I0714 23:11:59.771413 2110 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:59.774904 kubelet[2110]: E0714 23:11:59.774881 2110 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 14 23:12:00.239000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6760 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 14 23:12:00.239000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0007f5b80 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:12:00.239000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:02.739000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:02.739000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000159800 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:12:02.739000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:02.740000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:02.740000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000159a20 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:12:02.740000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:02.741000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:02.741000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000159da0 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:12:02.741000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:02.741000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:02.741000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0007fe920 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:12:02.741000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:02.874114 kubelet[2110]: I0714 23:12:02.874097 2110 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 14 23:12:02.874632 env[1247]: time="2025-07-14T23:12:02.874605977Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 14 23:12:02.874818 kubelet[2110]: I0714 23:12:02.874726 2110 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 14 23:12:03.857311 systemd[1]: Created slice kubepods-besteffort-pod3d838136_5aba_40b6_b01e_c52c3ecead56.slice. Jul 14 23:12:03.953295 kubelet[2110]: I0714 23:12:03.953267 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3d838136-5aba-40b6-b01e-c52c3ecead56-xtables-lock\") pod \"kube-proxy-467qr\" (UID: \"3d838136-5aba-40b6-b01e-c52c3ecead56\") " pod="kube-system/kube-proxy-467qr" Jul 14 23:12:03.953570 kubelet[2110]: I0714 23:12:03.953560 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3d838136-5aba-40b6-b01e-c52c3ecead56-lib-modules\") pod \"kube-proxy-467qr\" (UID: \"3d838136-5aba-40b6-b01e-c52c3ecead56\") " pod="kube-system/kube-proxy-467qr" Jul 14 23:12:03.953636 kubelet[2110]: I0714 23:12:03.953627 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q25db\" (UniqueName: \"kubernetes.io/projected/3d838136-5aba-40b6-b01e-c52c3ecead56-kube-api-access-q25db\") pod \"kube-proxy-467qr\" (UID: \"3d838136-5aba-40b6-b01e-c52c3ecead56\") " pod="kube-system/kube-proxy-467qr" Jul 14 23:12:03.953700 kubelet[2110]: I0714 23:12:03.953691 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/3d838136-5aba-40b6-b01e-c52c3ecead56-kube-proxy\") pod \"kube-proxy-467qr\" (UID: \"3d838136-5aba-40b6-b01e-c52c3ecead56\") " pod="kube-system/kube-proxy-467qr" Jul 14 23:12:04.024321 systemd[1]: Created slice kubepods-besteffort-pod6b08b2f1_cc90_41ba_bd1b_2e706c03fabe.slice. Jul 14 23:12:04.054045 kubelet[2110]: I0714 23:12:04.054016 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6b08b2f1-cc90-41ba-bd1b-2e706c03fabe-var-lib-calico\") pod \"tigera-operator-747864d56d-9svg6\" (UID: \"6b08b2f1-cc90-41ba-bd1b-2e706c03fabe\") " pod="tigera-operator/tigera-operator-747864d56d-9svg6" Jul 14 23:12:04.054204 kubelet[2110]: I0714 23:12:04.054193 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wjlb6\" (UniqueName: \"kubernetes.io/projected/6b08b2f1-cc90-41ba-bd1b-2e706c03fabe-kube-api-access-wjlb6\") pod \"tigera-operator-747864d56d-9svg6\" (UID: \"6b08b2f1-cc90-41ba-bd1b-2e706c03fabe\") " pod="tigera-operator/tigera-operator-747864d56d-9svg6" Jul 14 23:12:04.060642 kubelet[2110]: I0714 23:12:04.060627 2110 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 14 23:12:04.163442 env[1247]: time="2025-07-14T23:12:04.163382133Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-467qr,Uid:3d838136-5aba-40b6-b01e-c52c3ecead56,Namespace:kube-system,Attempt:0,}" Jul 14 23:12:04.181164 env[1247]: time="2025-07-14T23:12:04.181044242Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:04.181164 env[1247]: time="2025-07-14T23:12:04.181069354Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:04.181164 env[1247]: time="2025-07-14T23:12:04.181076545Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:04.181371 env[1247]: time="2025-07-14T23:12:04.181338349Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c5aabe81e4adafe38bf6a5b01f9d6f39532665332eaf0c211317746ed577d3e1 pid=2163 runtime=io.containerd.runc.v2 Jul 14 23:12:04.195581 systemd[1]: Started cri-containerd-c5aabe81e4adafe38bf6a5b01f9d6f39532665332eaf0c211317746ed577d3e1.scope. Jul 14 23:12:04.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.209127 kernel: kauditd_printk_skb: 17 callbacks suppressed Jul 14 23:12:04.209263 kernel: audit: type=1400 audit(1752534724.205:816): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.209298 kernel: audit: type=1400 audit(1752534724.205:817): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.213903 kernel: audit: type=1400 audit(1752534724.205:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.213948 kernel: audit: type=1400 audit(1752534724.205:819): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.218826 kernel: audit: type=1400 audit(1752534724.205:820): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.218871 kernel: audit: type=1400 audit(1752534724.205:821): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.223781 kernel: audit: type=1400 audit(1752534724.205:822): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.223845 kernel: audit: type=1400 audit(1752534724.205:823): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.228966 kernel: audit: type=1400 audit(1752534724.205:824): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.234789 kernel: audit: type=1400 audit(1752534724.205:825): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit: BPF prog-id=103 op=LOAD Jul 14 23:12:04.205000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=2163 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335616162653831653461646166653338626636613562303166396436 Jul 14 23:12:04.205000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014f6b0 a2=3c a3=c items=0 ppid=2163 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335616162653831653461646166653338626636613562303166396436 Jul 14 23:12:04.205000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.205000 audit: BPF prog-id=104 op=LOAD Jul 14 23:12:04.205000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014f9d8 a2=78 a3=c00021b9f0 items=0 ppid=2163 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335616162653831653461646166653338626636613562303166396436 Jul 14 23:12:04.211000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.211000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.211000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.211000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.211000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.211000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.211000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.211000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.211000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.211000 audit: BPF prog-id=105 op=LOAD Jul 14 23:12:04.211000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014f770 a2=78 a3=c00021ba38 items=0 ppid=2163 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335616162653831653461646166653338626636613562303166396436 Jul 14 23:12:04.216000 audit: BPF prog-id=105 op=UNLOAD Jul 14 23:12:04.216000 audit: BPF prog-id=104 op=UNLOAD Jul 14 23:12:04.216000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.216000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.216000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.216000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.216000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.216000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.216000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.216000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.216000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.216000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.216000 audit: BPF prog-id=106 op=LOAD Jul 14 23:12:04.216000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014fc30 a2=78 a3=c00021be48 items=0 ppid=2163 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335616162653831653461646166653338626636613562303166396436 Jul 14 23:12:04.238425 env[1247]: time="2025-07-14T23:12:04.238392870Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-467qr,Uid:3d838136-5aba-40b6-b01e-c52c3ecead56,Namespace:kube-system,Attempt:0,} returns sandbox id \"c5aabe81e4adafe38bf6a5b01f9d6f39532665332eaf0c211317746ed577d3e1\"" Jul 14 23:12:04.242223 env[1247]: time="2025-07-14T23:12:04.242190048Z" level=info msg="CreateContainer within sandbox \"c5aabe81e4adafe38bf6a5b01f9d6f39532665332eaf0c211317746ed577d3e1\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 14 23:12:04.257893 env[1247]: time="2025-07-14T23:12:04.257832456Z" level=info msg="CreateContainer within sandbox \"c5aabe81e4adafe38bf6a5b01f9d6f39532665332eaf0c211317746ed577d3e1\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"408b72c387958c298a9779dac10a4c5a06c196cbd915f98d286d504f386e1c3e\"" Jul 14 23:12:04.259181 env[1247]: time="2025-07-14T23:12:04.258918749Z" level=info msg="StartContainer for \"408b72c387958c298a9779dac10a4c5a06c196cbd915f98d286d504f386e1c3e\"" Jul 14 23:12:04.272418 systemd[1]: Started cri-containerd-408b72c387958c298a9779dac10a4c5a06c196cbd915f98d286d504f386e1c3e.scope. Jul 14 23:12:04.286000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.286000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7eff74bd61a8 items=0 ppid=2163 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430386237326333383739353863323938613937373964616331306134 Jul 14 23:12:04.286000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.286000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.286000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.286000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.286000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.286000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.286000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.286000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.286000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.286000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.286000 audit: BPF prog-id=107 op=LOAD Jul 14 23:12:04.286000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002c0558 items=0 ppid=2163 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430386237326333383739353863323938613937373964616331306134 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit: BPF prog-id=108 op=LOAD Jul 14 23:12:04.287000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002c05a8 items=0 ppid=2163 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430386237326333383739353863323938613937373964616331306134 Jul 14 23:12:04.287000 audit: BPF prog-id=108 op=UNLOAD Jul 14 23:12:04.287000 audit: BPF prog-id=107 op=UNLOAD Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.287000 audit: BPF prog-id=109 op=LOAD Jul 14 23:12:04.287000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002c0638 items=0 ppid=2163 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430386237326333383739353863323938613937373964616331306134 Jul 14 23:12:04.300473 env[1247]: time="2025-07-14T23:12:04.300438492Z" level=info msg="StartContainer for \"408b72c387958c298a9779dac10a4c5a06c196cbd915f98d286d504f386e1c3e\" returns successfully" Jul 14 23:12:04.326073 env[1247]: time="2025-07-14T23:12:04.326043511Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-9svg6,Uid:6b08b2f1-cc90-41ba-bd1b-2e706c03fabe,Namespace:tigera-operator,Attempt:0,}" Jul 14 23:12:04.352443 env[1247]: time="2025-07-14T23:12:04.352329921Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:04.352443 env[1247]: time="2025-07-14T23:12:04.352355538Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:04.352443 env[1247]: time="2025-07-14T23:12:04.352362781Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:04.352602 env[1247]: time="2025-07-14T23:12:04.352480418Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6964e59989c0a4d761df7f9b79a1ef35a0c51f687491361a770bcc9da07b25f3 pid=2237 runtime=io.containerd.runc.v2 Jul 14 23:12:04.360096 systemd[1]: Started cri-containerd-6964e59989c0a4d761df7f9b79a1ef35a0c51f687491361a770bcc9da07b25f3.scope. Jul 14 23:12:04.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.369000 audit: BPF prog-id=110 op=LOAD Jul 14 23:12:04.370000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.370000 audit[2247]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2237 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639363465353939383963306134643736316466376639623739613165 Jul 14 23:12:04.370000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.370000 audit[2247]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2237 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639363465353939383963306134643736316466376639623739613165 Jul 14 23:12:04.370000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.370000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.370000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.370000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.370000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.370000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.370000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.370000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.370000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.370000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.370000 audit: BPF prog-id=111 op=LOAD Jul 14 23:12:04.370000 audit[2247]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000300370 items=0 ppid=2237 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639363465353939383963306134643736316466376639623739613165 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit: BPF prog-id=112 op=LOAD Jul 14 23:12:04.371000 audit[2247]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003003b8 items=0 ppid=2237 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639363465353939383963306134643736316466376639623739613165 Jul 14 23:12:04.371000 audit: BPF prog-id=112 op=UNLOAD Jul 14 23:12:04.371000 audit: BPF prog-id=111 op=UNLOAD Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:04.371000 audit: BPF prog-id=113 op=LOAD Jul 14 23:12:04.371000 audit[2247]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003007c8 items=0 ppid=2237 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639363465353939383963306134643736316466376639623739613165 Jul 14 23:12:04.394154 env[1247]: time="2025-07-14T23:12:04.394123552Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-9svg6,Uid:6b08b2f1-cc90-41ba-bd1b-2e706c03fabe,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"6964e59989c0a4d761df7f9b79a1ef35a0c51f687491361a770bcc9da07b25f3\"" Jul 14 23:12:04.396163 env[1247]: time="2025-07-14T23:12:04.395074140Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 14 23:12:04.987000 audit[2308]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:04.987000 audit[2308]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdc01a0410 a2=0 a3=7ffdc01a03fc items=0 ppid=2217 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.987000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 23:12:04.988000 audit[2309]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:04.988000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd66ee5140 a2=0 a3=7ffd66ee512c items=0 ppid=2217 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.988000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 23:12:04.988000 audit[2310]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:04.988000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc5d6538b0 a2=0 a3=7ffc5d65389c items=0 ppid=2217 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.988000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 23:12:04.989000 audit[2311]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:04.989000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe8bc46940 a2=0 a3=7ffe8bc4692c items=0 ppid=2217 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.989000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 23:12:04.990000 audit[2312]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2312 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:04.990000 audit[2312]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd96528030 a2=0 a3=7ffd9652801c items=0 ppid=2217 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.990000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 23:12:04.990000 audit[2313]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:04.990000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd544dc200 a2=0 a3=7ffd544dc1ec items=0 ppid=2217 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:04.990000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 23:12:05.065045 systemd[1]: run-containerd-runc-k8s.io-c5aabe81e4adafe38bf6a5b01f9d6f39532665332eaf0c211317746ed577d3e1-runc.6SIr5H.mount: Deactivated successfully. Jul 14 23:12:05.115000 audit[2316]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.115000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe3b976eb0 a2=0 a3=7ffe3b976e9c items=0 ppid=2217 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.115000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 23:12:05.118000 audit[2318]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.118000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd199ae570 a2=0 a3=7ffd199ae55c items=0 ppid=2217 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.118000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 14 23:12:05.123000 audit[2321]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.123000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe1715e550 a2=0 a3=7ffe1715e53c items=0 ppid=2217 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.123000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 14 23:12:05.123000 audit[2322]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.123000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde1b970b0 a2=0 a3=7ffde1b9709c items=0 ppid=2217 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.123000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 23:12:05.125000 audit[2324]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.125000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff2ad85370 a2=0 a3=7fff2ad8535c items=0 ppid=2217 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.125000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 23:12:05.126000 audit[2325]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.126000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffd50b2920 a2=0 a3=7fffd50b290c items=0 ppid=2217 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.126000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 23:12:05.127000 audit[2327]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.127000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd19dd7250 a2=0 a3=7ffd19dd723c items=0 ppid=2217 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.127000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 23:12:05.129000 audit[2330]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.129000 audit[2330]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffeb639a520 a2=0 a3=7ffeb639a50c items=0 ppid=2217 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.129000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 14 23:12:05.130000 audit[2331]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.130000 audit[2331]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc6edb5da0 a2=0 a3=7ffc6edb5d8c items=0 ppid=2217 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.130000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 23:12:05.131000 audit[2333]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.131000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdbaccaa50 a2=0 a3=7ffdbaccaa3c items=0 ppid=2217 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.131000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 23:12:05.132000 audit[2334]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.132000 audit[2334]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffda003cb50 a2=0 a3=7ffda003cb3c items=0 ppid=2217 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.132000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 23:12:05.133000 audit[2336]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.133000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc35367380 a2=0 a3=7ffc3536736c items=0 ppid=2217 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.133000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 23:12:05.136000 audit[2339]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.136000 audit[2339]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc1fec1e50 a2=0 a3=7ffc1fec1e3c items=0 ppid=2217 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.136000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 23:12:05.138000 audit[2342]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2342 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.138000 audit[2342]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd2f9ad3c0 a2=0 a3=7ffd2f9ad3ac items=0 ppid=2217 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.138000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 23:12:05.138000 audit[2343]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.138000 audit[2343]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc93368ae0 a2=0 a3=7ffc93368acc items=0 ppid=2217 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.138000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 23:12:05.150000 audit[2345]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.150000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffc50003fb0 a2=0 a3=7ffc50003f9c items=0 ppid=2217 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.150000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 23:12:05.152000 audit[2348]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.152000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe7528c470 a2=0 a3=7ffe7528c45c items=0 ppid=2217 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.152000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 23:12:05.153000 audit[2349]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2349 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.153000 audit[2349]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffce240dc0 a2=0 a3=7fffce240dac items=0 ppid=2217 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.153000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 23:12:05.154000 audit[2351]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2351 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:05.154000 audit[2351]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffee5523500 a2=0 a3=7ffee55234ec items=0 ppid=2217 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.154000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 23:12:05.197000 audit[2357]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:05.197000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd785a2aa0 a2=0 a3=7ffd785a2a8c items=0 ppid=2217 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.197000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:05.206000 audit[2357]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:05.206000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffd785a2aa0 a2=0 a3=7ffd785a2a8c items=0 ppid=2217 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.206000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:05.208000 audit[2362]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2362 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.208000 audit[2362]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd50c7aa40 a2=0 a3=7ffd50c7aa2c items=0 ppid=2217 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.208000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 23:12:05.210000 audit[2364]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.210000 audit[2364]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff0111aa70 a2=0 a3=7fff0111aa5c items=0 ppid=2217 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.210000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 14 23:12:05.214000 audit[2367]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2367 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.214000 audit[2367]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffcd7def370 a2=0 a3=7ffcd7def35c items=0 ppid=2217 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.214000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 14 23:12:05.216000 audit[2368]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2368 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.216000 audit[2368]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff407bd00 a2=0 a3=7ffff407bcec items=0 ppid=2217 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.216000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 23:12:05.218000 audit[2370]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.218000 audit[2370]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffda893f610 a2=0 a3=7ffda893f5fc items=0 ppid=2217 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.218000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 23:12:05.219000 audit[2371]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2371 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.219000 audit[2371]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe638f66c0 a2=0 a3=7ffe638f66ac items=0 ppid=2217 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.219000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 23:12:05.220000 audit[2373]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2373 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.220000 audit[2373]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc0a9de350 a2=0 a3=7ffc0a9de33c items=0 ppid=2217 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.220000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 14 23:12:05.222000 audit[2376]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2376 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.222000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe41c95590 a2=0 a3=7ffe41c9557c items=0 ppid=2217 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.222000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 23:12:05.223000 audit[2377]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2377 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.223000 audit[2377]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd44ca4df0 a2=0 a3=7ffd44ca4ddc items=0 ppid=2217 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.223000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 23:12:05.225000 audit[2379]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2379 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.225000 audit[2379]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcdffbdee0 a2=0 a3=7ffcdffbdecc items=0 ppid=2217 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.225000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 23:12:05.225000 audit[2380]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2380 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.225000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffc5ace890 a2=0 a3=7fffc5ace87c items=0 ppid=2217 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.225000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 23:12:05.227000 audit[2382]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.227000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc711cb620 a2=0 a3=7ffc711cb60c items=0 ppid=2217 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.227000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 23:12:05.229000 audit[2385]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2385 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.229000 audit[2385]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd077e5060 a2=0 a3=7ffd077e504c items=0 ppid=2217 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.229000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 23:12:05.231000 audit[2388]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2388 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.231000 audit[2388]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffed3fc1550 a2=0 a3=7ffed3fc153c items=0 ppid=2217 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.231000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 14 23:12:05.232000 audit[2389]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2389 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.232000 audit[2389]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffee4f365d0 a2=0 a3=7ffee4f365bc items=0 ppid=2217 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.232000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 23:12:05.233000 audit[2391]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2391 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.233000 audit[2391]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe081edd00 a2=0 a3=7ffe081edcec items=0 ppid=2217 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.233000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 23:12:05.236000 audit[2394]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2394 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.236000 audit[2394]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff097ad7b0 a2=0 a3=7fff097ad79c items=0 ppid=2217 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.236000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 23:12:05.236000 audit[2395]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2395 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.236000 audit[2395]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd06b34110 a2=0 a3=7ffd06b340fc items=0 ppid=2217 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.236000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 23:12:05.238000 audit[2397]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2397 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.238000 audit[2397]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe12519a10 a2=0 a3=7ffe125199fc items=0 ppid=2217 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.238000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 23:12:05.239000 audit[2398]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2398 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.239000 audit[2398]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc5bf780b0 a2=0 a3=7ffc5bf7809c items=0 ppid=2217 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.239000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 23:12:05.241000 audit[2400]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2400 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.241000 audit[2400]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff0f317480 a2=0 a3=7fff0f31746c items=0 ppid=2217 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.241000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 23:12:05.243000 audit[2403]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2403 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:05.243000 audit[2403]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc0c308ac0 a2=0 a3=7ffc0c308aac items=0 ppid=2217 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.243000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 23:12:05.245000 audit[2405]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2405 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 23:12:05.245000 audit[2405]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7fff6b77eab0 a2=0 a3=7fff6b77ea9c items=0 ppid=2217 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.245000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:05.246000 audit[2405]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2405 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 23:12:05.246000 audit[2405]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7fff6b77eab0 a2=0 a3=7fff6b77ea9c items=0 ppid=2217 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.246000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:05.565984 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2225691078.mount: Deactivated successfully. Jul 14 23:12:06.123031 env[1247]: time="2025-07-14T23:12:06.123002883Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:06.124462 env[1247]: time="2025-07-14T23:12:06.124445974Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:06.125622 env[1247]: time="2025-07-14T23:12:06.125609895Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:06.126699 env[1247]: time="2025-07-14T23:12:06.126686310Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:06.127335 env[1247]: time="2025-07-14T23:12:06.127307545Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 14 23:12:06.132043 env[1247]: time="2025-07-14T23:12:06.132021616Z" level=info msg="CreateContainer within sandbox \"6964e59989c0a4d761df7f9b79a1ef35a0c51f687491361a770bcc9da07b25f3\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 14 23:12:06.139549 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount706390021.mount: Deactivated successfully. Jul 14 23:12:06.143473 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3294587208.mount: Deactivated successfully. Jul 14 23:12:06.145538 env[1247]: time="2025-07-14T23:12:06.145513536Z" level=info msg="CreateContainer within sandbox \"6964e59989c0a4d761df7f9b79a1ef35a0c51f687491361a770bcc9da07b25f3\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"f91310d8c395ec6783fb226aeee5e9c632ef60150bcbadde5f693753f0c81d96\"" Jul 14 23:12:06.147003 env[1247]: time="2025-07-14T23:12:06.146987712Z" level=info msg="StartContainer for \"f91310d8c395ec6783fb226aeee5e9c632ef60150bcbadde5f693753f0c81d96\"" Jul 14 23:12:06.160105 systemd[1]: Started cri-containerd-f91310d8c395ec6783fb226aeee5e9c632ef60150bcbadde5f693753f0c81d96.scope. Jul 14 23:12:06.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.171000 audit: BPF prog-id=114 op=LOAD Jul 14 23:12:06.172000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.172000 audit[2413]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2237 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:06.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639313331306438633339356563363738336662323236616565653565 Jul 14 23:12:06.172000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.172000 audit[2413]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2237 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:06.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639313331306438633339356563363738336662323236616565653565 Jul 14 23:12:06.172000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.172000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.172000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.172000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.172000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.172000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.172000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.172000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.172000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.172000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.172000 audit: BPF prog-id=115 op=LOAD Jul 14 23:12:06.172000 audit[2413]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003aeb70 items=0 ppid=2237 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:06.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639313331306438633339356563363738336662323236616565653565 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit: BPF prog-id=116 op=LOAD Jul 14 23:12:06.173000 audit[2413]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003aebb8 items=0 ppid=2237 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:06.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639313331306438633339356563363738336662323236616565653565 Jul 14 23:12:06.173000 audit: BPF prog-id=116 op=UNLOAD Jul 14 23:12:06.173000 audit: BPF prog-id=115 op=UNLOAD Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { perfmon } for pid=2413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit[2413]: AVC avc: denied { bpf } for pid=2413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:06.173000 audit: BPF prog-id=117 op=LOAD Jul 14 23:12:06.173000 audit[2413]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003aefc8 items=0 ppid=2237 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:06.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639313331306438633339356563363738336662323236616565653565 Jul 14 23:12:06.188649 env[1247]: time="2025-07-14T23:12:06.188622715Z" level=info msg="StartContainer for \"f91310d8c395ec6783fb226aeee5e9c632ef60150bcbadde5f693753f0c81d96\" returns successfully" Jul 14 23:12:06.786985 kubelet[2110]: I0714 23:12:06.786946 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-467qr" podStartSLOduration=3.786929946 podStartE2EDuration="3.786929946s" podCreationTimestamp="2025-07-14 23:12:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:12:04.78998425 +0000 UTC m=+6.266590754" watchObservedRunningTime="2025-07-14 23:12:06.786929946 +0000 UTC m=+8.263536449" Jul 14 23:12:09.461055 kubelet[2110]: I0714 23:12:09.461012 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-9svg6" podStartSLOduration=4.727371987 podStartE2EDuration="6.46100046s" podCreationTimestamp="2025-07-14 23:12:03 +0000 UTC" firstStartedPulling="2025-07-14 23:12:04.394830316 +0000 UTC m=+5.871436814" lastFinishedPulling="2025-07-14 23:12:06.128458786 +0000 UTC m=+7.605065287" observedRunningTime="2025-07-14 23:12:06.787829679 +0000 UTC m=+8.264436190" watchObservedRunningTime="2025-07-14 23:12:09.46100046 +0000 UTC m=+10.937606963" Jul 14 23:12:12.081110 sudo[1468]: pam_unix(sudo:session): session closed for user root Jul 14 23:12:12.086075 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 14 23:12:12.086201 kernel: audit: type=1106 audit(1752534732.080:927): pid=1468 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:12:12.080000 audit[1468]: USER_END pid=1468 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:12:12.089435 kernel: audit: type=1104 audit(1752534732.080:928): pid=1468 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:12:12.080000 audit[1468]: CRED_DISP pid=1468 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:12:12.091371 sshd[1464]: pam_unix(sshd:session): session closed for user core Jul 14 23:12:12.094000 audit[1464]: USER_END pid=1464 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:12:12.099926 kernel: audit: type=1106 audit(1752534732.094:929): pid=1464 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:12:12.103635 kernel: audit: type=1104 audit(1752534732.094:930): pid=1464 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:12:12.094000 audit[1464]: CRED_DISP pid=1464 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:12:12.105214 systemd[1]: sshd@6-139.178.70.104:22-139.178.89.65:50770.service: Deactivated successfully. Jul 14 23:12:12.105966 systemd[1]: session-9.scope: Deactivated successfully. Jul 14 23:12:12.106086 systemd[1]: session-9.scope: Consumed 4.289s CPU time. Jul 14 23:12:12.107009 systemd-logind[1235]: Session 9 logged out. Waiting for processes to exit. Jul 14 23:12:12.108096 systemd-logind[1235]: Removed session 9. Jul 14 23:12:12.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.104:22-139.178.89.65:50770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:12:12.113772 kernel: audit: type=1131 audit(1752534732.104:931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.104:22-139.178.89.65:50770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:12:12.857899 kernel: audit: type=1325 audit(1752534732.846:932): table=filter:89 family=2 entries=14 op=nft_register_rule pid=2491 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:12.858021 kernel: audit: type=1300 audit(1752534732.846:932): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffec8d07100 a2=0 a3=7ffec8d070ec items=0 ppid=2217 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:12.846000 audit[2491]: NETFILTER_CFG table=filter:89 family=2 entries=14 op=nft_register_rule pid=2491 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:12.846000 audit[2491]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffec8d07100 a2=0 a3=7ffec8d070ec items=0 ppid=2217 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:12.846000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:12.864644 kernel: audit: type=1327 audit(1752534732.846:932): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:12.864752 kernel: audit: type=1325 audit(1752534732.860:933): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2491 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:12.860000 audit[2491]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2491 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:12.860000 audit[2491]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffec8d07100 a2=0 a3=0 items=0 ppid=2217 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:12.872765 kernel: audit: type=1300 audit(1752534732.860:933): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffec8d07100 a2=0 a3=0 items=0 ppid=2217 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:12.860000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:12.876000 audit[2493]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=2493 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:12.876000 audit[2493]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffeae70d0e0 a2=0 a3=7ffeae70d0cc items=0 ppid=2217 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:12.876000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:12.878000 audit[2493]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2493 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:12.878000 audit[2493]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffeae70d0e0 a2=0 a3=0 items=0 ppid=2217 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:12.878000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:14.487000 audit[2495]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2495 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:14.487000 audit[2495]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffcbbc1a650 a2=0 a3=7ffcbbc1a63c items=0 ppid=2217 pid=2495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:14.487000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:14.492000 audit[2495]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2495 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:14.492000 audit[2495]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcbbc1a650 a2=0 a3=0 items=0 ppid=2217 pid=2495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:14.492000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:14.863000 audit[2497]: NETFILTER_CFG table=filter:95 family=2 entries=20 op=nft_register_rule pid=2497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:14.863000 audit[2497]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffc304d2f20 a2=0 a3=7ffc304d2f0c items=0 ppid=2217 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:14.863000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:14.865000 audit[2497]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:14.865000 audit[2497]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc304d2f20 a2=0 a3=0 items=0 ppid=2217 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:14.865000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:14.955485 systemd[1]: Created slice kubepods-besteffort-pod7cd386b6_364c_44c9_9b59_5e94bd597968.slice. Jul 14 23:12:15.022466 kubelet[2110]: I0714 23:12:15.022426 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/7cd386b6-364c-44c9-9b59-5e94bd597968-typha-certs\") pod \"calico-typha-6858874498-bzkgd\" (UID: \"7cd386b6-364c-44c9-9b59-5e94bd597968\") " pod="calico-system/calico-typha-6858874498-bzkgd" Jul 14 23:12:15.022882 kubelet[2110]: I0714 23:12:15.022865 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7cd386b6-364c-44c9-9b59-5e94bd597968-tigera-ca-bundle\") pod \"calico-typha-6858874498-bzkgd\" (UID: \"7cd386b6-364c-44c9-9b59-5e94bd597968\") " pod="calico-system/calico-typha-6858874498-bzkgd" Jul 14 23:12:15.022970 kubelet[2110]: I0714 23:12:15.022956 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hmcft\" (UniqueName: \"kubernetes.io/projected/7cd386b6-364c-44c9-9b59-5e94bd597968-kube-api-access-hmcft\") pod \"calico-typha-6858874498-bzkgd\" (UID: \"7cd386b6-364c-44c9-9b59-5e94bd597968\") " pod="calico-system/calico-typha-6858874498-bzkgd" Jul 14 23:12:15.133180 systemd[1]: Created slice kubepods-besteffort-podc42c0298_803d_4ac0_a36f_335acda7c650.slice. Jul 14 23:12:15.224433 kubelet[2110]: I0714 23:12:15.224404 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/c42c0298-803d-4ac0-a36f-335acda7c650-var-run-calico\") pod \"calico-node-c2tpx\" (UID: \"c42c0298-803d-4ac0-a36f-335acda7c650\") " pod="calico-system/calico-node-c2tpx" Jul 14 23:12:15.224609 kubelet[2110]: I0714 23:12:15.224599 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/c42c0298-803d-4ac0-a36f-335acda7c650-cni-log-dir\") pod \"calico-node-c2tpx\" (UID: \"c42c0298-803d-4ac0-a36f-335acda7c650\") " pod="calico-system/calico-node-c2tpx" Jul 14 23:12:15.224676 kubelet[2110]: I0714 23:12:15.224664 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c42c0298-803d-4ac0-a36f-335acda7c650-xtables-lock\") pod \"calico-node-c2tpx\" (UID: \"c42c0298-803d-4ac0-a36f-335acda7c650\") " pod="calico-system/calico-node-c2tpx" Jul 14 23:12:15.224735 kubelet[2110]: I0714 23:12:15.224726 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/c42c0298-803d-4ac0-a36f-335acda7c650-cni-bin-dir\") pod \"calico-node-c2tpx\" (UID: \"c42c0298-803d-4ac0-a36f-335acda7c650\") " pod="calico-system/calico-node-c2tpx" Jul 14 23:12:15.224810 kubelet[2110]: I0714 23:12:15.224800 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/c42c0298-803d-4ac0-a36f-335acda7c650-flexvol-driver-host\") pod \"calico-node-c2tpx\" (UID: \"c42c0298-803d-4ac0-a36f-335acda7c650\") " pod="calico-system/calico-node-c2tpx" Jul 14 23:12:15.224867 kubelet[2110]: I0714 23:12:15.224858 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c42c0298-803d-4ac0-a36f-335acda7c650-lib-modules\") pod \"calico-node-c2tpx\" (UID: \"c42c0298-803d-4ac0-a36f-335acda7c650\") " pod="calico-system/calico-node-c2tpx" Jul 14 23:12:15.224922 kubelet[2110]: I0714 23:12:15.224913 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c42c0298-803d-4ac0-a36f-335acda7c650-tigera-ca-bundle\") pod \"calico-node-c2tpx\" (UID: \"c42c0298-803d-4ac0-a36f-335acda7c650\") " pod="calico-system/calico-node-c2tpx" Jul 14 23:12:15.224984 kubelet[2110]: I0714 23:12:15.224975 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8svzd\" (UniqueName: \"kubernetes.io/projected/c42c0298-803d-4ac0-a36f-335acda7c650-kube-api-access-8svzd\") pod \"calico-node-c2tpx\" (UID: \"c42c0298-803d-4ac0-a36f-335acda7c650\") " pod="calico-system/calico-node-c2tpx" Jul 14 23:12:15.225040 kubelet[2110]: I0714 23:12:15.225031 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/c42c0298-803d-4ac0-a36f-335acda7c650-cni-net-dir\") pod \"calico-node-c2tpx\" (UID: \"c42c0298-803d-4ac0-a36f-335acda7c650\") " pod="calico-system/calico-node-c2tpx" Jul 14 23:12:15.225102 kubelet[2110]: I0714 23:12:15.225091 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/c42c0298-803d-4ac0-a36f-335acda7c650-var-lib-calico\") pod \"calico-node-c2tpx\" (UID: \"c42c0298-803d-4ac0-a36f-335acda7c650\") " pod="calico-system/calico-node-c2tpx" Jul 14 23:12:15.225175 kubelet[2110]: I0714 23:12:15.225163 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/c42c0298-803d-4ac0-a36f-335acda7c650-node-certs\") pod \"calico-node-c2tpx\" (UID: \"c42c0298-803d-4ac0-a36f-335acda7c650\") " pod="calico-system/calico-node-c2tpx" Jul 14 23:12:15.225243 kubelet[2110]: I0714 23:12:15.225233 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/c42c0298-803d-4ac0-a36f-335acda7c650-policysync\") pod \"calico-node-c2tpx\" (UID: \"c42c0298-803d-4ac0-a36f-335acda7c650\") " pod="calico-system/calico-node-c2tpx" Jul 14 23:12:15.295520 env[1247]: time="2025-07-14T23:12:15.295043212Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6858874498-bzkgd,Uid:7cd386b6-364c-44c9-9b59-5e94bd597968,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:15.353463 kubelet[2110]: E0714 23:12:15.353431 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.353463 kubelet[2110]: W0714 23:12:15.353456 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.364775 kubelet[2110]: E0714 23:12:15.364729 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.388829 kubelet[2110]: E0714 23:12:15.388738 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f8fg8" podUID="c6c195e3-b7bd-48dc-b09c-98461d031cf2" Jul 14 23:12:15.402817 env[1247]: time="2025-07-14T23:12:15.402254964Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:15.402817 env[1247]: time="2025-07-14T23:12:15.402293869Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:15.402817 env[1247]: time="2025-07-14T23:12:15.402302910Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:15.403180 env[1247]: time="2025-07-14T23:12:15.403148461Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6294b3261829e858e8eff12b6740a85b977417af8fe28ff42a758d1de0d7154e pid=2511 runtime=io.containerd.runc.v2 Jul 14 23:12:15.413467 systemd[1]: Started cri-containerd-6294b3261829e858e8eff12b6740a85b977417af8fe28ff42a758d1de0d7154e.scope. Jul 14 23:12:15.418737 kubelet[2110]: E0714 23:12:15.418720 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.418856 kubelet[2110]: W0714 23:12:15.418844 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.418926 kubelet[2110]: E0714 23:12:15.418916 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.419153 kubelet[2110]: E0714 23:12:15.419145 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.419215 kubelet[2110]: W0714 23:12:15.419206 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.419358 kubelet[2110]: E0714 23:12:15.419350 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.419526 kubelet[2110]: E0714 23:12:15.419518 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.419590 kubelet[2110]: W0714 23:12:15.419582 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.419643 kubelet[2110]: E0714 23:12:15.419633 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.429380 kubelet[2110]: E0714 23:12:15.429362 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.429487 kubelet[2110]: W0714 23:12:15.429475 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.429562 kubelet[2110]: E0714 23:12:15.429552 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.429758 kubelet[2110]: E0714 23:12:15.429751 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.429825 kubelet[2110]: W0714 23:12:15.429816 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.429875 kubelet[2110]: E0714 23:12:15.429866 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.430024 kubelet[2110]: E0714 23:12:15.430018 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.430079 kubelet[2110]: W0714 23:12:15.430071 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.430137 kubelet[2110]: E0714 23:12:15.430129 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.430325 kubelet[2110]: E0714 23:12:15.430318 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.430407 kubelet[2110]: W0714 23:12:15.430398 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.430453 kubelet[2110]: E0714 23:12:15.430445 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.430610 kubelet[2110]: E0714 23:12:15.430604 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.430691 kubelet[2110]: W0714 23:12:15.430683 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.430755 kubelet[2110]: E0714 23:12:15.430737 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.430915 kubelet[2110]: E0714 23:12:15.430909 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.430975 kubelet[2110]: W0714 23:12:15.430967 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.431024 kubelet[2110]: E0714 23:12:15.431016 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.431307 kubelet[2110]: E0714 23:12:15.431299 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.431364 kubelet[2110]: W0714 23:12:15.431355 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.431420 kubelet[2110]: E0714 23:12:15.431412 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.431575 kubelet[2110]: E0714 23:12:15.431568 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.431635 kubelet[2110]: W0714 23:12:15.431627 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.431684 kubelet[2110]: E0714 23:12:15.431676 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.431879 kubelet[2110]: E0714 23:12:15.431873 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.431931 kubelet[2110]: W0714 23:12:15.431917 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.431986 kubelet[2110]: E0714 23:12:15.431979 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.432182 kubelet[2110]: E0714 23:12:15.432176 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.432239 kubelet[2110]: W0714 23:12:15.432226 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.432290 kubelet[2110]: E0714 23:12:15.432282 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.432442 kubelet[2110]: E0714 23:12:15.432435 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.432502 kubelet[2110]: W0714 23:12:15.432494 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.432551 kubelet[2110]: E0714 23:12:15.432543 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.432716 kubelet[2110]: E0714 23:12:15.432709 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.432828 kubelet[2110]: W0714 23:12:15.432820 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.432876 kubelet[2110]: E0714 23:12:15.432867 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.433053 kubelet[2110]: E0714 23:12:15.433047 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.433110 kubelet[2110]: W0714 23:12:15.433096 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.433158 kubelet[2110]: E0714 23:12:15.433150 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.433317 kubelet[2110]: E0714 23:12:15.433311 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.433367 kubelet[2110]: W0714 23:12:15.433359 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.433412 kubelet[2110]: E0714 23:12:15.433405 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.433715 kubelet[2110]: E0714 23:12:15.433708 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.433783 kubelet[2110]: W0714 23:12:15.433772 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.433836 kubelet[2110]: E0714 23:12:15.433826 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.434091 kubelet[2110]: E0714 23:12:15.434084 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.434143 kubelet[2110]: W0714 23:12:15.434134 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.434194 kubelet[2110]: E0714 23:12:15.434186 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.434323 kubelet[2110]: E0714 23:12:15.434317 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.434371 kubelet[2110]: W0714 23:12:15.434362 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.434416 kubelet[2110]: E0714 23:12:15.434408 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.434934 kubelet[2110]: E0714 23:12:15.434922 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.434934 kubelet[2110]: W0714 23:12:15.434932 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.435011 kubelet[2110]: E0714 23:12:15.434940 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.435011 kubelet[2110]: I0714 23:12:15.434957 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/c6c195e3-b7bd-48dc-b09c-98461d031cf2-socket-dir\") pod \"csi-node-driver-f8fg8\" (UID: \"c6c195e3-b7bd-48dc-b09c-98461d031cf2\") " pod="calico-system/csi-node-driver-f8fg8" Jul 14 23:12:15.435066 kubelet[2110]: E0714 23:12:15.435056 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.435066 kubelet[2110]: W0714 23:12:15.435064 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.435117 kubelet[2110]: E0714 23:12:15.435072 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.435117 kubelet[2110]: I0714 23:12:15.435082 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/c6c195e3-b7bd-48dc-b09c-98461d031cf2-varrun\") pod \"csi-node-driver-f8fg8\" (UID: \"c6c195e3-b7bd-48dc-b09c-98461d031cf2\") " pod="calico-system/csi-node-driver-f8fg8" Jul 14 23:12:15.435236 kubelet[2110]: E0714 23:12:15.435226 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.435236 kubelet[2110]: W0714 23:12:15.435235 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.435298 kubelet[2110]: E0714 23:12:15.435240 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.435298 kubelet[2110]: I0714 23:12:15.435251 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mrt4n\" (UniqueName: \"kubernetes.io/projected/c6c195e3-b7bd-48dc-b09c-98461d031cf2-kube-api-access-mrt4n\") pod \"csi-node-driver-f8fg8\" (UID: \"c6c195e3-b7bd-48dc-b09c-98461d031cf2\") " pod="calico-system/csi-node-driver-f8fg8" Jul 14 23:12:15.435355 kubelet[2110]: E0714 23:12:15.435343 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.435355 kubelet[2110]: W0714 23:12:15.435348 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.435355 kubelet[2110]: E0714 23:12:15.435353 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.435411 kubelet[2110]: I0714 23:12:15.435361 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/c6c195e3-b7bd-48dc-b09c-98461d031cf2-kubelet-dir\") pod \"csi-node-driver-f8fg8\" (UID: \"c6c195e3-b7bd-48dc-b09c-98461d031cf2\") " pod="calico-system/csi-node-driver-f8fg8" Jul 14 23:12:15.435449 kubelet[2110]: E0714 23:12:15.435439 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.435449 kubelet[2110]: W0714 23:12:15.435446 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.435507 kubelet[2110]: E0714 23:12:15.435451 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.435507 kubelet[2110]: I0714 23:12:15.435461 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/c6c195e3-b7bd-48dc-b09c-98461d031cf2-registration-dir\") pod \"csi-node-driver-f8fg8\" (UID: \"c6c195e3-b7bd-48dc-b09c-98461d031cf2\") " pod="calico-system/csi-node-driver-f8fg8" Jul 14 23:12:15.435629 kubelet[2110]: E0714 23:12:15.435620 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.435629 kubelet[2110]: W0714 23:12:15.435627 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.435696 kubelet[2110]: E0714 23:12:15.435633 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.435731 kubelet[2110]: E0714 23:12:15.435721 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.435731 kubelet[2110]: W0714 23:12:15.435728 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.435806 kubelet[2110]: E0714 23:12:15.435733 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.436212 kubelet[2110]: E0714 23:12:15.436204 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.436266 kubelet[2110]: W0714 23:12:15.436257 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.436318 kubelet[2110]: E0714 23:12:15.436309 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.436457 kubelet[2110]: E0714 23:12:15.436451 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.436509 kubelet[2110]: W0714 23:12:15.436500 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.436557 kubelet[2110]: E0714 23:12:15.436549 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.436799 kubelet[2110]: E0714 23:12:15.436792 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.436853 kubelet[2110]: W0714 23:12:15.436844 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.436902 kubelet[2110]: E0714 23:12:15.436894 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.437813 kubelet[2110]: E0714 23:12:15.437802 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.437885 kubelet[2110]: W0714 23:12:15.437875 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.437940 kubelet[2110]: E0714 23:12:15.437931 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.438098 kubelet[2110]: E0714 23:12:15.438091 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.438150 kubelet[2110]: W0714 23:12:15.438141 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.438199 kubelet[2110]: E0714 23:12:15.438191 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.438337 kubelet[2110]: E0714 23:12:15.438330 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.438388 kubelet[2110]: W0714 23:12:15.438380 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.438437 kubelet[2110]: E0714 23:12:15.438429 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.438589 kubelet[2110]: E0714 23:12:15.438583 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.438636 kubelet[2110]: W0714 23:12:15.438628 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.438685 kubelet[2110]: E0714 23:12:15.438677 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.438843 kubelet[2110]: E0714 23:12:15.438836 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.438889 kubelet[2110]: W0714 23:12:15.438881 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.438944 kubelet[2110]: E0714 23:12:15.438935 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.440610 env[1247]: time="2025-07-14T23:12:15.440340560Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-c2tpx,Uid:c42c0298-803d-4ac0-a36f-335acda7c650,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:15.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.444000 audit: BPF prog-id=118 op=LOAD Jul 14 23:12:15.444000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.444000 audit[2522]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2511 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632393462333236313832396538353865386566663132623637343061 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2511 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632393462333236313832396538353865386566663132623637343061 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit: BPF prog-id=119 op=LOAD Jul 14 23:12:15.445000 audit[2522]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000025120 items=0 ppid=2511 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632393462333236313832396538353865386566663132623637343061 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.445000 audit: BPF prog-id=120 op=LOAD Jul 14 23:12:15.445000 audit[2522]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000025168 items=0 ppid=2511 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632393462333236313832396538353865386566663132623637343061 Jul 14 23:12:15.446000 audit: BPF prog-id=120 op=UNLOAD Jul 14 23:12:15.446000 audit: BPF prog-id=119 op=UNLOAD Jul 14 23:12:15.446000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.446000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.446000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.446000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.446000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.446000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.446000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.446000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.446000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.446000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.446000 audit: BPF prog-id=121 op=LOAD Jul 14 23:12:15.446000 audit[2522]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000025578 items=0 ppid=2511 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632393462333236313832396538353865386566663132623637343061 Jul 14 23:12:15.471840 env[1247]: time="2025-07-14T23:12:15.471027357Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6858874498-bzkgd,Uid:7cd386b6-364c-44c9-9b59-5e94bd597968,Namespace:calico-system,Attempt:0,} returns sandbox id \"6294b3261829e858e8eff12b6740a85b977417af8fe28ff42a758d1de0d7154e\"" Jul 14 23:12:15.536209 kubelet[2110]: E0714 23:12:15.536192 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.536328 kubelet[2110]: W0714 23:12:15.536316 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.536399 kubelet[2110]: E0714 23:12:15.536388 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.536552 kubelet[2110]: E0714 23:12:15.536544 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.536601 kubelet[2110]: W0714 23:12:15.536592 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.536654 kubelet[2110]: E0714 23:12:15.536644 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.536830 kubelet[2110]: E0714 23:12:15.536822 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.536877 kubelet[2110]: W0714 23:12:15.536868 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.536932 kubelet[2110]: E0714 23:12:15.536923 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.537108 kubelet[2110]: E0714 23:12:15.537100 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.537156 kubelet[2110]: W0714 23:12:15.537146 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.537203 kubelet[2110]: E0714 23:12:15.537195 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.537356 kubelet[2110]: E0714 23:12:15.537349 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.537405 kubelet[2110]: W0714 23:12:15.537396 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.537466 kubelet[2110]: E0714 23:12:15.537455 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.537616 kubelet[2110]: E0714 23:12:15.537609 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.537664 kubelet[2110]: W0714 23:12:15.537655 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.537788 kubelet[2110]: E0714 23:12:15.537779 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.537949 kubelet[2110]: E0714 23:12:15.537942 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.538002 kubelet[2110]: W0714 23:12:15.537985 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.538060 kubelet[2110]: E0714 23:12:15.538051 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.538210 kubelet[2110]: E0714 23:12:15.538204 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.538263 kubelet[2110]: W0714 23:12:15.538249 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.538316 kubelet[2110]: E0714 23:12:15.538309 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.539033 kubelet[2110]: E0714 23:12:15.539024 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.539113 kubelet[2110]: W0714 23:12:15.539102 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.539470 env[1247]: time="2025-07-14T23:12:15.539448383Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 14 23:12:15.539646 kubelet[2110]: E0714 23:12:15.539637 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.540906 kubelet[2110]: E0714 23:12:15.540892 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.541038 kubelet[2110]: W0714 23:12:15.541024 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.541112 kubelet[2110]: E0714 23:12:15.541101 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.541428 kubelet[2110]: E0714 23:12:15.541413 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.541530 kubelet[2110]: W0714 23:12:15.541518 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.541690 kubelet[2110]: E0714 23:12:15.541680 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.541911 kubelet[2110]: E0714 23:12:15.541902 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.541976 kubelet[2110]: W0714 23:12:15.541968 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.542047 kubelet[2110]: E0714 23:12:15.542026 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.542229 kubelet[2110]: E0714 23:12:15.542222 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.542288 kubelet[2110]: W0714 23:12:15.542280 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.542338 kubelet[2110]: E0714 23:12:15.542330 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.542501 kubelet[2110]: E0714 23:12:15.542494 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.542559 kubelet[2110]: W0714 23:12:15.542551 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.542606 kubelet[2110]: E0714 23:12:15.542598 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.542842 kubelet[2110]: E0714 23:12:15.542835 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.542910 kubelet[2110]: W0714 23:12:15.542902 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.542963 kubelet[2110]: E0714 23:12:15.542953 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.553302 kubelet[2110]: E0714 23:12:15.553148 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.553302 kubelet[2110]: W0714 23:12:15.553164 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.553302 kubelet[2110]: E0714 23:12:15.553179 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.554929 kubelet[2110]: E0714 23:12:15.554852 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.554929 kubelet[2110]: W0714 23:12:15.554861 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.554929 kubelet[2110]: E0714 23:12:15.554870 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.555179 kubelet[2110]: E0714 23:12:15.555107 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.555179 kubelet[2110]: W0714 23:12:15.555114 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.555179 kubelet[2110]: E0714 23:12:15.555120 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.555395 kubelet[2110]: E0714 23:12:15.555314 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.555395 kubelet[2110]: W0714 23:12:15.555320 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.555395 kubelet[2110]: E0714 23:12:15.555326 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.555622 kubelet[2110]: E0714 23:12:15.555519 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.555622 kubelet[2110]: W0714 23:12:15.555527 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.555622 kubelet[2110]: E0714 23:12:15.555533 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.555815 kubelet[2110]: E0714 23:12:15.555737 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.555815 kubelet[2110]: W0714 23:12:15.555751 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.555815 kubelet[2110]: E0714 23:12:15.555758 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.555977 kubelet[2110]: E0714 23:12:15.555914 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.555977 kubelet[2110]: W0714 23:12:15.555919 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.555977 kubelet[2110]: E0714 23:12:15.555925 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.556225 kubelet[2110]: E0714 23:12:15.556147 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.556225 kubelet[2110]: W0714 23:12:15.556154 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.556225 kubelet[2110]: E0714 23:12:15.556160 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.556361 kubelet[2110]: E0714 23:12:15.556335 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.556361 kubelet[2110]: W0714 23:12:15.556342 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.556361 kubelet[2110]: E0714 23:12:15.556348 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.567872 kubelet[2110]: E0714 23:12:15.567854 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.567992 kubelet[2110]: W0714 23:12:15.567980 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.568061 kubelet[2110]: E0714 23:12:15.568050 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.580868 kubelet[2110]: E0714 23:12:15.580851 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.580983 kubelet[2110]: W0714 23:12:15.580971 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.581040 kubelet[2110]: E0714 23:12:15.581030 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.600337 env[1247]: time="2025-07-14T23:12:15.600293891Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:15.600424 env[1247]: time="2025-07-14T23:12:15.600339372Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:15.600424 env[1247]: time="2025-07-14T23:12:15.600355695Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:15.600535 env[1247]: time="2025-07-14T23:12:15.600512410Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a72f99f3f61b6c83a26cac4cee7f6b6c1bfabcc5ce77ac31978072c8b3ccbd4d pid=2612 runtime=io.containerd.runc.v2 Jul 14 23:12:15.610969 systemd[1]: Started cri-containerd-a72f99f3f61b6c83a26cac4cee7f6b6c1bfabcc5ce77ac31978072c8b3ccbd4d.scope. Jul 14 23:12:15.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.624000 audit: BPF prog-id=122 op=LOAD Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2612 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137326639396633663631623663383361323663616334636565376636 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2612 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137326639396633663631623663383361323663616334636565376636 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit: BPF prog-id=123 op=LOAD Jul 14 23:12:15.627000 audit[2623]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002c7fa0 items=0 ppid=2612 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137326639396633663631623663383361323663616334636565376636 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit: BPF prog-id=124 op=LOAD Jul 14 23:12:15.627000 audit[2623]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002c7fe8 items=0 ppid=2612 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137326639396633663631623663383361323663616334636565376636 Jul 14 23:12:15.627000 audit: BPF prog-id=124 op=UNLOAD Jul 14 23:12:15.627000 audit: BPF prog-id=123 op=UNLOAD Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.627000 audit: BPF prog-id=125 op=LOAD Jul 14 23:12:15.627000 audit[2623]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003963f8 items=0 ppid=2612 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137326639396633663631623663383361323663616334636565376636 Jul 14 23:12:15.658132 env[1247]: time="2025-07-14T23:12:15.658030681Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-c2tpx,Uid:c42c0298-803d-4ac0-a36f-335acda7c650,Namespace:calico-system,Attempt:0,} returns sandbox id \"a72f99f3f61b6c83a26cac4cee7f6b6c1bfabcc5ce77ac31978072c8b3ccbd4d\"" Jul 14 23:12:15.937000 audit[2646]: NETFILTER_CFG table=filter:97 family=2 entries=22 op=nft_register_rule pid=2646 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:15.937000 audit[2646]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffef93426e0 a2=0 a3=7ffef93426cc items=0 ppid=2217 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.937000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:15.939000 audit[2646]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2646 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:15.939000 audit[2646]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffef93426e0 a2=0 a3=0 items=0 ppid=2217 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.939000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:16.720941 kubelet[2110]: E0714 23:12:16.720910 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f8fg8" podUID="c6c195e3-b7bd-48dc-b09c-98461d031cf2" Jul 14 23:12:17.198867 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3356090464.mount: Deactivated successfully. Jul 14 23:12:17.358517 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 14 23:12:17.358589 kernel: audit: type=1130 audit(1752534737.355:978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.104:22-185.255.90.238:48198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:12:17.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.104:22-185.255.90.238:48198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:12:17.356647 systemd[1]: Started sshd@7-139.178.70.104:22-185.255.90.238:48198.service. Jul 14 23:12:18.467265 env[1247]: time="2025-07-14T23:12:18.467224475Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:18.470869 env[1247]: time="2025-07-14T23:12:18.470830353Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:18.472396 env[1247]: time="2025-07-14T23:12:18.472375582Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:18.473581 env[1247]: time="2025-07-14T23:12:18.473558857Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:18.474164 env[1247]: time="2025-07-14T23:12:18.474143231Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 14 23:12:18.475107 env[1247]: time="2025-07-14T23:12:18.475090940Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 14 23:12:18.497630 env[1247]: time="2025-07-14T23:12:18.497603138Z" level=info msg="CreateContainer within sandbox \"6294b3261829e858e8eff12b6740a85b977417af8fe28ff42a758d1de0d7154e\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 14 23:12:18.517136 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1984705594.mount: Deactivated successfully. Jul 14 23:12:18.519246 env[1247]: time="2025-07-14T23:12:18.519217680Z" level=info msg="CreateContainer within sandbox \"6294b3261829e858e8eff12b6740a85b977417af8fe28ff42a758d1de0d7154e\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"1b52d6930a0aa0a13a332f93249af6c8dcbb932529051ec4ea4705fe47dc78cb\"" Jul 14 23:12:18.520539 env[1247]: time="2025-07-14T23:12:18.520510091Z" level=info msg="StartContainer for \"1b52d6930a0aa0a13a332f93249af6c8dcbb932529051ec4ea4705fe47dc78cb\"" Jul 14 23:12:18.542368 systemd[1]: Started cri-containerd-1b52d6930a0aa0a13a332f93249af6c8dcbb932529051ec4ea4705fe47dc78cb.scope. Jul 14 23:12:18.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.561106 kernel: audit: type=1400 audit(1752534738.554:979): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.561168 kernel: audit: type=1400 audit(1752534738.554:980): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.561196 kernel: audit: type=1400 audit(1752534738.554:981): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.566101 kernel: audit: type=1400 audit(1752534738.554:982): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.566151 kernel: audit: type=1400 audit(1752534738.554:983): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.571265 kernel: audit: type=1400 audit(1752534738.554:984): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.571459 kernel: audit: type=1400 audit(1752534738.554:985): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.576247 kernel: audit: type=1400 audit(1752534738.554:986): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.576303 kernel: audit: type=1400 audit(1752534738.554:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.554000 audit: BPF prog-id=126 op=LOAD Jul 14 23:12:18.558000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.558000 audit[2659]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2511 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:18.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162353264363933306130616130613133613333326639333234396166 Jul 14 23:12:18.558000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.558000 audit[2659]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2511 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:18.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162353264363933306130616130613133613333326639333234396166 Jul 14 23:12:18.558000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.558000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.558000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.558000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.558000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.558000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.558000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.558000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.558000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.558000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.558000 audit: BPF prog-id=127 op=LOAD Jul 14 23:12:18.558000 audit[2659]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00032a680 items=0 ppid=2511 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:18.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162353264363933306130616130613133613333326639333234396166 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit: BPF prog-id=128 op=LOAD Jul 14 23:12:18.562000 audit[2659]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00032a6c8 items=0 ppid=2511 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:18.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162353264363933306130616130613133613333326639333234396166 Jul 14 23:12:18.562000 audit: BPF prog-id=128 op=UNLOAD Jul 14 23:12:18.562000 audit: BPF prog-id=127 op=UNLOAD Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:18.562000 audit: BPF prog-id=129 op=LOAD Jul 14 23:12:18.562000 audit[2659]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00032aad8 items=0 ppid=2511 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:18.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162353264363933306130616130613133613333326639333234396166 Jul 14 23:12:18.603812 env[1247]: time="2025-07-14T23:12:18.603782797Z" level=info msg="StartContainer for \"1b52d6930a0aa0a13a332f93249af6c8dcbb932529051ec4ea4705fe47dc78cb\" returns successfully" Jul 14 23:12:18.643000 audit[2648]: USER_AUTH pid=2648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.255.90.238 addr=185.255.90.238 terminal=ssh res=failed' Jul 14 23:12:18.644184 sshd[2648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.255.90.238 user=root Jul 14 23:12:18.709481 kubelet[2110]: E0714 23:12:18.709451 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f8fg8" podUID="c6c195e3-b7bd-48dc-b09c-98461d031cf2" Jul 14 23:12:18.854260 kubelet[2110]: E0714 23:12:18.854243 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.854443 kubelet[2110]: W0714 23:12:18.854423 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.854576 kubelet[2110]: E0714 23:12:18.854566 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.854720 kubelet[2110]: E0714 23:12:18.854713 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.854784 kubelet[2110]: W0714 23:12:18.854775 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.854832 kubelet[2110]: E0714 23:12:18.854824 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.854972 kubelet[2110]: E0714 23:12:18.854965 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.855018 kubelet[2110]: W0714 23:12:18.855010 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.855065 kubelet[2110]: E0714 23:12:18.855058 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.855226 kubelet[2110]: E0714 23:12:18.855219 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.855274 kubelet[2110]: W0714 23:12:18.855266 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.855323 kubelet[2110]: E0714 23:12:18.855315 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.855457 kubelet[2110]: E0714 23:12:18.855451 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.855502 kubelet[2110]: W0714 23:12:18.855493 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.855548 kubelet[2110]: E0714 23:12:18.855540 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.855678 kubelet[2110]: E0714 23:12:18.855672 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.855726 kubelet[2110]: W0714 23:12:18.855718 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.855790 kubelet[2110]: E0714 23:12:18.855783 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.855922 kubelet[2110]: E0714 23:12:18.855916 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.855971 kubelet[2110]: W0714 23:12:18.855962 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.856018 kubelet[2110]: E0714 23:12:18.856011 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.856163 kubelet[2110]: E0714 23:12:18.856156 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.856209 kubelet[2110]: W0714 23:12:18.856200 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.856256 kubelet[2110]: E0714 23:12:18.856248 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.856395 kubelet[2110]: E0714 23:12:18.856389 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.856440 kubelet[2110]: W0714 23:12:18.856432 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.856488 kubelet[2110]: E0714 23:12:18.856481 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.856613 kubelet[2110]: E0714 23:12:18.856607 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.856670 kubelet[2110]: W0714 23:12:18.856662 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.856930 kubelet[2110]: E0714 23:12:18.856921 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.857182 kubelet[2110]: E0714 23:12:18.857165 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.857229 kubelet[2110]: W0714 23:12:18.857220 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.857278 kubelet[2110]: E0714 23:12:18.857271 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.857419 kubelet[2110]: E0714 23:12:18.857412 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.857465 kubelet[2110]: W0714 23:12:18.857457 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.857513 kubelet[2110]: E0714 23:12:18.857505 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.857736 kubelet[2110]: E0714 23:12:18.857730 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.857804 kubelet[2110]: W0714 23:12:18.857795 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.857867 kubelet[2110]: E0714 23:12:18.857859 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.858926 kubelet[2110]: E0714 23:12:18.858917 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.859034 kubelet[2110]: W0714 23:12:18.859024 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.859084 kubelet[2110]: E0714 23:12:18.859076 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.859246 kubelet[2110]: E0714 23:12:18.859233 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.859294 kubelet[2110]: W0714 23:12:18.859286 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.859344 kubelet[2110]: E0714 23:12:18.859336 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.928642 kubelet[2110]: E0714 23:12:18.928623 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.928781 kubelet[2110]: W0714 23:12:18.928768 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.928840 kubelet[2110]: E0714 23:12:18.928830 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.929020 kubelet[2110]: E0714 23:12:18.929013 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.929077 kubelet[2110]: W0714 23:12:18.929069 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.929126 kubelet[2110]: E0714 23:12:18.929119 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.929273 kubelet[2110]: E0714 23:12:18.929261 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.929319 kubelet[2110]: W0714 23:12:18.929311 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.929368 kubelet[2110]: E0714 23:12:18.929360 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.929523 kubelet[2110]: E0714 23:12:18.929517 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.929567 kubelet[2110]: W0714 23:12:18.929559 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.929615 kubelet[2110]: E0714 23:12:18.929607 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.929757 kubelet[2110]: E0714 23:12:18.929742 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.929805 kubelet[2110]: W0714 23:12:18.929796 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.929853 kubelet[2110]: E0714 23:12:18.929846 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.929992 kubelet[2110]: E0714 23:12:18.929986 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.930037 kubelet[2110]: W0714 23:12:18.930029 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.930085 kubelet[2110]: E0714 23:12:18.930077 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.930240 kubelet[2110]: E0714 23:12:18.930228 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.930287 kubelet[2110]: W0714 23:12:18.930279 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.930342 kubelet[2110]: E0714 23:12:18.930328 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.930579 kubelet[2110]: E0714 23:12:18.930572 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.930626 kubelet[2110]: W0714 23:12:18.930618 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.930674 kubelet[2110]: E0714 23:12:18.930667 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.930842 kubelet[2110]: E0714 23:12:18.930835 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.930891 kubelet[2110]: W0714 23:12:18.930883 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.930938 kubelet[2110]: E0714 23:12:18.930930 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.931084 kubelet[2110]: E0714 23:12:18.931078 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.931132 kubelet[2110]: W0714 23:12:18.931124 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.931184 kubelet[2110]: E0714 23:12:18.931176 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.931335 kubelet[2110]: E0714 23:12:18.931329 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.931380 kubelet[2110]: W0714 23:12:18.931372 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.931429 kubelet[2110]: E0714 23:12:18.931421 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.931570 kubelet[2110]: E0714 23:12:18.931557 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.931616 kubelet[2110]: W0714 23:12:18.931608 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.931666 kubelet[2110]: E0714 23:12:18.931658 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.931845 kubelet[2110]: E0714 23:12:18.931839 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.931895 kubelet[2110]: W0714 23:12:18.931887 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.931942 kubelet[2110]: E0714 23:12:18.931934 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.932174 kubelet[2110]: E0714 23:12:18.932159 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.932174 kubelet[2110]: W0714 23:12:18.932173 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.932238 kubelet[2110]: E0714 23:12:18.932182 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.932308 kubelet[2110]: E0714 23:12:18.932288 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.932308 kubelet[2110]: W0714 23:12:18.932306 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.932371 kubelet[2110]: E0714 23:12:18.932315 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.932421 kubelet[2110]: E0714 23:12:18.932410 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.932421 kubelet[2110]: W0714 23:12:18.932418 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.932478 kubelet[2110]: E0714 23:12:18.932424 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.932658 kubelet[2110]: E0714 23:12:18.932651 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.932706 kubelet[2110]: W0714 23:12:18.932698 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.932765 kubelet[2110]: E0714 23:12:18.932757 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:18.932916 kubelet[2110]: E0714 23:12:18.932910 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:18.932965 kubelet[2110]: W0714 23:12:18.932957 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:18.933012 kubelet[2110]: E0714 23:12:18.933004 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.850846 kubelet[2110]: I0714 23:12:19.850785 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6858874498-bzkgd" podStartSLOduration=2.898818494 podStartE2EDuration="5.834423857s" podCreationTimestamp="2025-07-14 23:12:14 +0000 UTC" firstStartedPulling="2025-07-14 23:12:15.539254539 +0000 UTC m=+17.015861041" lastFinishedPulling="2025-07-14 23:12:18.474859903 +0000 UTC m=+19.951466404" observedRunningTime="2025-07-14 23:12:18.958608806 +0000 UTC m=+20.435215323" watchObservedRunningTime="2025-07-14 23:12:19.834423857 +0000 UTC m=+21.311030365" Jul 14 23:12:19.865905 kubelet[2110]: E0714 23:12:19.865883 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.865905 kubelet[2110]: W0714 23:12:19.865899 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.865905 kubelet[2110]: E0714 23:12:19.865916 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.866243 kubelet[2110]: E0714 23:12:19.866219 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.866243 kubelet[2110]: W0714 23:12:19.866232 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.866243 kubelet[2110]: E0714 23:12:19.866241 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.866441 kubelet[2110]: E0714 23:12:19.866418 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.866441 kubelet[2110]: W0714 23:12:19.866428 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.866441 kubelet[2110]: E0714 23:12:19.866437 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.867210 kubelet[2110]: E0714 23:12:19.867198 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.867266 kubelet[2110]: W0714 23:12:19.867209 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.867266 kubelet[2110]: E0714 23:12:19.867220 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.867457 kubelet[2110]: E0714 23:12:19.867439 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.867457 kubelet[2110]: W0714 23:12:19.867456 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.867543 kubelet[2110]: E0714 23:12:19.867465 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.867657 kubelet[2110]: E0714 23:12:19.867637 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.867657 kubelet[2110]: W0714 23:12:19.867647 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.867713 kubelet[2110]: E0714 23:12:19.867656 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.867828 kubelet[2110]: E0714 23:12:19.867817 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.867867 kubelet[2110]: W0714 23:12:19.867831 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.867867 kubelet[2110]: E0714 23:12:19.867839 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.868010 kubelet[2110]: E0714 23:12:19.867998 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.868010 kubelet[2110]: W0714 23:12:19.868006 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.868096 kubelet[2110]: E0714 23:12:19.868014 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.868208 kubelet[2110]: E0714 23:12:19.868197 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.868208 kubelet[2110]: W0714 23:12:19.868206 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.868288 kubelet[2110]: E0714 23:12:19.868213 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.870615 kubelet[2110]: E0714 23:12:19.868617 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.870615 kubelet[2110]: W0714 23:12:19.868625 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.870615 kubelet[2110]: E0714 23:12:19.868633 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.870615 kubelet[2110]: E0714 23:12:19.868741 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.870615 kubelet[2110]: W0714 23:12:19.868759 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.870615 kubelet[2110]: E0714 23:12:19.868767 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.870615 kubelet[2110]: E0714 23:12:19.868921 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.870615 kubelet[2110]: W0714 23:12:19.868927 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.870615 kubelet[2110]: E0714 23:12:19.868934 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.870615 kubelet[2110]: E0714 23:12:19.869214 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.870859 kubelet[2110]: W0714 23:12:19.869221 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.870859 kubelet[2110]: E0714 23:12:19.869229 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.870859 kubelet[2110]: E0714 23:12:19.869755 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.870859 kubelet[2110]: W0714 23:12:19.869765 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.870859 kubelet[2110]: E0714 23:12:19.869774 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.870859 kubelet[2110]: E0714 23:12:19.869896 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.870859 kubelet[2110]: W0714 23:12:19.869902 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.870859 kubelet[2110]: E0714 23:12:19.869919 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.923000 audit[2739]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2739 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:19.923000 audit[2739]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc24305190 a2=0 a3=7ffc2430517c items=0 ppid=2217 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:19.923000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:19.928000 audit[2739]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2739 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:19.928000 audit[2739]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc24305190 a2=0 a3=7ffc2430517c items=0 ppid=2217 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:19.928000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:19.936087 kubelet[2110]: E0714 23:12:19.936075 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.936165 kubelet[2110]: W0714 23:12:19.936154 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.936222 kubelet[2110]: E0714 23:12:19.936213 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.936387 kubelet[2110]: E0714 23:12:19.936380 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.936435 kubelet[2110]: W0714 23:12:19.936427 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.936485 kubelet[2110]: E0714 23:12:19.936476 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.936672 kubelet[2110]: E0714 23:12:19.936657 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.936706 kubelet[2110]: W0714 23:12:19.936670 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.936706 kubelet[2110]: E0714 23:12:19.936680 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.936863 kubelet[2110]: E0714 23:12:19.936852 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.936903 kubelet[2110]: W0714 23:12:19.936864 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.936903 kubelet[2110]: E0714 23:12:19.936872 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.937000 kubelet[2110]: E0714 23:12:19.936988 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.937032 kubelet[2110]: W0714 23:12:19.936999 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.937032 kubelet[2110]: E0714 23:12:19.937007 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.937146 kubelet[2110]: E0714 23:12:19.937135 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.937146 kubelet[2110]: W0714 23:12:19.937144 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.937190 kubelet[2110]: E0714 23:12:19.937151 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.937319 kubelet[2110]: E0714 23:12:19.937312 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.937365 kubelet[2110]: W0714 23:12:19.937357 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.937414 kubelet[2110]: E0714 23:12:19.937406 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.937576 kubelet[2110]: E0714 23:12:19.937564 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.937576 kubelet[2110]: W0714 23:12:19.937574 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.937629 kubelet[2110]: E0714 23:12:19.937582 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.937701 kubelet[2110]: E0714 23:12:19.937689 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.937701 kubelet[2110]: W0714 23:12:19.937700 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.937775 kubelet[2110]: E0714 23:12:19.937707 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.937873 kubelet[2110]: E0714 23:12:19.937864 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.937873 kubelet[2110]: W0714 23:12:19.937872 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.937928 kubelet[2110]: E0714 23:12:19.937880 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.938021 kubelet[2110]: E0714 23:12:19.938009 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.938021 kubelet[2110]: W0714 23:12:19.938019 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.938076 kubelet[2110]: E0714 23:12:19.938026 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.938321 kubelet[2110]: E0714 23:12:19.938309 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.938321 kubelet[2110]: W0714 23:12:19.938319 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.938381 kubelet[2110]: E0714 23:12:19.938327 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.938458 kubelet[2110]: E0714 23:12:19.938449 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.938458 kubelet[2110]: W0714 23:12:19.938458 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.938533 kubelet[2110]: E0714 23:12:19.938465 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.938599 kubelet[2110]: E0714 23:12:19.938589 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.938599 kubelet[2110]: W0714 23:12:19.938599 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.938654 kubelet[2110]: E0714 23:12:19.938606 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.938773 kubelet[2110]: E0714 23:12:19.938737 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.938773 kubelet[2110]: W0714 23:12:19.938766 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.938832 kubelet[2110]: E0714 23:12:19.938776 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.938890 kubelet[2110]: E0714 23:12:19.938881 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.938890 kubelet[2110]: W0714 23:12:19.938889 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.938947 kubelet[2110]: E0714 23:12:19.938897 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.939044 kubelet[2110]: E0714 23:12:19.939034 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.939084 kubelet[2110]: W0714 23:12:19.939046 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.939084 kubelet[2110]: E0714 23:12:19.939055 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:19.939334 kubelet[2110]: E0714 23:12:19.939324 2110 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:19.939334 kubelet[2110]: W0714 23:12:19.939334 2110 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:19.939387 kubelet[2110]: E0714 23:12:19.939342 2110 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:20.352971 env[1247]: time="2025-07-14T23:12:20.352943927Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:20.370231 env[1247]: time="2025-07-14T23:12:20.370209315Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:20.376429 env[1247]: time="2025-07-14T23:12:20.376409963Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:20.383894 env[1247]: time="2025-07-14T23:12:20.383877039Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:20.384316 env[1247]: time="2025-07-14T23:12:20.384302805Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 14 23:12:20.394010 env[1247]: time="2025-07-14T23:12:20.393987282Z" level=info msg="CreateContainer within sandbox \"a72f99f3f61b6c83a26cac4cee7f6b6c1bfabcc5ce77ac31978072c8b3ccbd4d\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 14 23:12:20.434296 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount817087741.mount: Deactivated successfully. Jul 14 23:12:20.473948 env[1247]: time="2025-07-14T23:12:20.473905280Z" level=info msg="CreateContainer within sandbox \"a72f99f3f61b6c83a26cac4cee7f6b6c1bfabcc5ce77ac31978072c8b3ccbd4d\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"3a769c03a120bdc56a358199621c758ce30ce44e9274f7b9c64c67286c4a0230\"" Jul 14 23:12:20.474489 env[1247]: time="2025-07-14T23:12:20.474476059Z" level=info msg="StartContainer for \"3a769c03a120bdc56a358199621c758ce30ce44e9274f7b9c64c67286c4a0230\"" Jul 14 23:12:20.496907 systemd[1]: run-containerd-runc-k8s.io-3a769c03a120bdc56a358199621c758ce30ce44e9274f7b9c64c67286c4a0230-runc.WH0JB9.mount: Deactivated successfully. Jul 14 23:12:20.501872 systemd[1]: Started cri-containerd-3a769c03a120bdc56a358199621c758ce30ce44e9274f7b9c64c67286c4a0230.scope. Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fd0840ae1c8 items=0 ppid=2612 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:20.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361373639633033613132306264633536613335383139393632316337 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit: BPF prog-id=130 op=LOAD Jul 14 23:12:20.512000 audit[2766]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00039e3a8 items=0 ppid=2612 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:20.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361373639633033613132306264633536613335383139393632316337 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.512000 audit: BPF prog-id=131 op=LOAD Jul 14 23:12:20.512000 audit[2766]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00039e3f8 items=0 ppid=2612 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:20.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361373639633033613132306264633536613335383139393632316337 Jul 14 23:12:20.513000 audit: BPF prog-id=131 op=UNLOAD Jul 14 23:12:20.513000 audit: BPF prog-id=130 op=UNLOAD Jul 14 23:12:20.513000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.513000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.513000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.513000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.513000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.513000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.513000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.513000 audit[2766]: AVC avc: denied { perfmon } for pid=2766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.513000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.513000 audit[2766]: AVC avc: denied { bpf } for pid=2766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.513000 audit: BPF prog-id=132 op=LOAD Jul 14 23:12:20.513000 audit[2766]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00039e488 items=0 ppid=2612 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:20.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361373639633033613132306264633536613335383139393632316337 Jul 14 23:12:20.527936 systemd[1]: cri-containerd-3a769c03a120bdc56a358199621c758ce30ce44e9274f7b9c64c67286c4a0230.scope: Deactivated successfully. Jul 14 23:12:20.531000 audit: BPF prog-id=132 op=UNLOAD Jul 14 23:12:20.535546 env[1247]: time="2025-07-14T23:12:20.535520828Z" level=info msg="StartContainer for \"3a769c03a120bdc56a358199621c758ce30ce44e9274f7b9c64c67286c4a0230\" returns successfully" Jul 14 23:12:20.549054 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3a769c03a120bdc56a358199621c758ce30ce44e9274f7b9c64c67286c4a0230-rootfs.mount: Deactivated successfully. Jul 14 23:12:20.708610 kubelet[2110]: E0714 23:12:20.708522 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f8fg8" podUID="c6c195e3-b7bd-48dc-b09c-98461d031cf2" Jul 14 23:12:20.849157 sshd[2648]: Failed password for root from 185.255.90.238 port 48198 ssh2 Jul 14 23:12:21.032695 env[1247]: time="2025-07-14T23:12:21.032608363Z" level=info msg="shim disconnected" id=3a769c03a120bdc56a358199621c758ce30ce44e9274f7b9c64c67286c4a0230 Jul 14 23:12:21.032695 env[1247]: time="2025-07-14T23:12:21.032644904Z" level=warning msg="cleaning up after shim disconnected" id=3a769c03a120bdc56a358199621c758ce30ce44e9274f7b9c64c67286c4a0230 namespace=k8s.io Jul 14 23:12:21.032695 env[1247]: time="2025-07-14T23:12:21.032655069Z" level=info msg="cleaning up dead shim" Jul 14 23:12:21.038395 env[1247]: time="2025-07-14T23:12:21.038360831Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:12:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2811 runtime=io.containerd.runc.v2\n" Jul 14 23:12:21.619862 sshd[2648]: Received disconnect from 185.255.90.238 port 48198:11: Bye Bye [preauth] Jul 14 23:12:21.619862 sshd[2648]: Disconnected from authenticating user root 185.255.90.238 port 48198 [preauth] Jul 14 23:12:21.620784 systemd[1]: sshd@7-139.178.70.104:22-185.255.90.238:48198.service: Deactivated successfully. Jul 14 23:12:21.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.104:22-185.255.90.238:48198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:12:21.808612 env[1247]: time="2025-07-14T23:12:21.808406224Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 14 23:12:22.709124 kubelet[2110]: E0714 23:12:22.709055 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f8fg8" podUID="c6c195e3-b7bd-48dc-b09c-98461d031cf2" Jul 14 23:12:24.708213 kubelet[2110]: E0714 23:12:24.708154 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f8fg8" podUID="c6c195e3-b7bd-48dc-b09c-98461d031cf2" Jul 14 23:12:26.074840 env[1247]: time="2025-07-14T23:12:26.074798206Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:26.083079 env[1247]: time="2025-07-14T23:12:26.083029291Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:26.088286 env[1247]: time="2025-07-14T23:12:26.088249182Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:26.091264 env[1247]: time="2025-07-14T23:12:26.091247533Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:26.091590 env[1247]: time="2025-07-14T23:12:26.091560734Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 14 23:12:26.096969 env[1247]: time="2025-07-14T23:12:26.096943851Z" level=info msg="CreateContainer within sandbox \"a72f99f3f61b6c83a26cac4cee7f6b6c1bfabcc5ce77ac31978072c8b3ccbd4d\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 14 23:12:26.118458 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2864833337.mount: Deactivated successfully. Jul 14 23:12:26.126994 env[1247]: time="2025-07-14T23:12:26.126961384Z" level=info msg="CreateContainer within sandbox \"a72f99f3f61b6c83a26cac4cee7f6b6c1bfabcc5ce77ac31978072c8b3ccbd4d\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"32dc824f93e5c7cc67a8db2521da64eecf210f1a76a34b2082ec352b1fe7db61\"" Jul 14 23:12:26.127516 env[1247]: time="2025-07-14T23:12:26.127478204Z" level=info msg="StartContainer for \"32dc824f93e5c7cc67a8db2521da64eecf210f1a76a34b2082ec352b1fe7db61\"" Jul 14 23:12:26.158832 systemd[1]: Started cri-containerd-32dc824f93e5c7cc67a8db2521da64eecf210f1a76a34b2082ec352b1fe7db61.scope. Jul 14 23:12:26.188697 kernel: kauditd_printk_skb: 100 callbacks suppressed Jul 14 23:12:26.188784 kernel: audit: type=1400 audit(1752534746.177:1008): avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.177000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.177000 audit[2835]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00019f6b0 a2=3c a3=7f87ed1ebe48 items=0 ppid=2612 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:26.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332646338323466393365356337636336376138646232353231646136 Jul 14 23:12:26.204682 kernel: audit: type=1300 audit(1752534746.177:1008): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00019f6b0 a2=3c a3=7f87ed1ebe48 items=0 ppid=2612 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:26.204721 kernel: audit: type=1327 audit(1752534746.177:1008): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332646338323466393365356337636336376138646232353231646136 Jul 14 23:12:26.213280 kernel: audit: type=1400 audit(1752534746.179:1009): avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.213337 kernel: audit: type=1400 audit(1752534746.179:1009): avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.213355 kernel: audit: type=1400 audit(1752534746.179:1009): avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.213368 kernel: audit: type=1400 audit(1752534746.179:1009): avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.213399 kernel: audit: type=1400 audit(1752534746.179:1009): avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.213421 kernel: audit: type=1400 audit(1752534746.179:1009): avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.179000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.179000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.179000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.179000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.179000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.179000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.179000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.218762 kernel: audit: type=1400 audit(1752534746.179:1009): avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.179000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.179000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.179000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.179000 audit: BPF prog-id=133 op=LOAD Jul 14 23:12:26.179000 audit[2835]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00019f9d8 a2=78 a3=c0003934e8 items=0 ppid=2612 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:26.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332646338323466393365356337636336376138646232353231646136 Jul 14 23:12:26.187000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.187000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.187000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.187000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.187000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.187000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.187000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.187000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.187000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.187000 audit: BPF prog-id=134 op=LOAD Jul 14 23:12:26.187000 audit[2835]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00019f770 a2=78 a3=c000393538 items=0 ppid=2612 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:26.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332646338323466393365356337636336376138646232353231646136 Jul 14 23:12:26.188000 audit: BPF prog-id=134 op=UNLOAD Jul 14 23:12:26.188000 audit: BPF prog-id=133 op=UNLOAD Jul 14 23:12:26.188000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.188000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.188000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.188000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.188000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.188000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.188000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.188000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.188000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.188000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:26.188000 audit: BPF prog-id=135 op=LOAD Jul 14 23:12:26.188000 audit[2835]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00019fc30 a2=78 a3=c0003935c8 items=0 ppid=2612 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:26.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332646338323466393365356337636336376138646232353231646136 Jul 14 23:12:26.225716 env[1247]: time="2025-07-14T23:12:26.225690661Z" level=info msg="StartContainer for \"32dc824f93e5c7cc67a8db2521da64eecf210f1a76a34b2082ec352b1fe7db61\" returns successfully" Jul 14 23:12:26.708770 kubelet[2110]: E0714 23:12:26.708729 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f8fg8" podUID="c6c195e3-b7bd-48dc-b09c-98461d031cf2" Jul 14 23:12:27.114651 systemd[1]: run-containerd-runc-k8s.io-32dc824f93e5c7cc67a8db2521da64eecf210f1a76a34b2082ec352b1fe7db61-runc.zHvxRV.mount: Deactivated successfully. Jul 14 23:12:28.709144 kubelet[2110]: E0714 23:12:28.709116 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f8fg8" podUID="c6c195e3-b7bd-48dc-b09c-98461d031cf2" Jul 14 23:12:29.992121 env[1247]: time="2025-07-14T23:12:29.992073065Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 23:12:29.993854 systemd[1]: cri-containerd-32dc824f93e5c7cc67a8db2521da64eecf210f1a76a34b2082ec352b1fe7db61.scope: Deactivated successfully. Jul 14 23:12:29.997000 audit: BPF prog-id=135 op=UNLOAD Jul 14 23:12:30.017376 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-32dc824f93e5c7cc67a8db2521da64eecf210f1a76a34b2082ec352b1fe7db61-rootfs.mount: Deactivated successfully. Jul 14 23:12:30.023991 env[1247]: time="2025-07-14T23:12:30.023951071Z" level=info msg="shim disconnected" id=32dc824f93e5c7cc67a8db2521da64eecf210f1a76a34b2082ec352b1fe7db61 Jul 14 23:12:30.023991 env[1247]: time="2025-07-14T23:12:30.023987158Z" level=warning msg="cleaning up after shim disconnected" id=32dc824f93e5c7cc67a8db2521da64eecf210f1a76a34b2082ec352b1fe7db61 namespace=k8s.io Jul 14 23:12:30.024112 env[1247]: time="2025-07-14T23:12:30.023996827Z" level=info msg="cleaning up dead shim" Jul 14 23:12:30.030256 kubelet[2110]: I0714 23:12:30.029432 2110 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 14 23:12:30.034018 env[1247]: time="2025-07-14T23:12:30.033156252Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:12:30Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2876 runtime=io.containerd.runc.v2\n" Jul 14 23:12:30.088277 systemd[1]: Created slice kubepods-besteffort-pod12707600_10bf_4bfb_be4a_9dc5ca0bfb2f.slice. Jul 14 23:12:30.132137 kubelet[2110]: I0714 23:12:30.132112 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/12707600-10bf-4bfb-be4a-9dc5ca0bfb2f-calico-apiserver-certs\") pod \"calico-apiserver-5945579587-z48mb\" (UID: \"12707600-10bf-4bfb-be4a-9dc5ca0bfb2f\") " pod="calico-apiserver/calico-apiserver-5945579587-z48mb" Jul 14 23:12:30.132137 kubelet[2110]: I0714 23:12:30.132135 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/35477ad0-0bd5-4d19-a21c-4649c1795360-tigera-ca-bundle\") pod \"calico-kube-controllers-6dfbf78cff-fbjqb\" (UID: \"35477ad0-0bd5-4d19-a21c-4649c1795360\") " pod="calico-system/calico-kube-controllers-6dfbf78cff-fbjqb" Jul 14 23:12:30.132264 kubelet[2110]: I0714 23:12:30.132146 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82-whisker-backend-key-pair\") pod \"whisker-558c5f5677-d22kz\" (UID: \"8c1a0e12-92f0-4ce7-8d7e-8e3385289a82\") " pod="calico-system/whisker-558c5f5677-d22kz" Jul 14 23:12:30.132264 kubelet[2110]: I0714 23:12:30.132157 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7nfzh\" (UniqueName: \"kubernetes.io/projected/35477ad0-0bd5-4d19-a21c-4649c1795360-kube-api-access-7nfzh\") pod \"calico-kube-controllers-6dfbf78cff-fbjqb\" (UID: \"35477ad0-0bd5-4d19-a21c-4649c1795360\") " pod="calico-system/calico-kube-controllers-6dfbf78cff-fbjqb" Jul 14 23:12:30.132264 kubelet[2110]: I0714 23:12:30.132168 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rvs7t\" (UniqueName: \"kubernetes.io/projected/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82-kube-api-access-rvs7t\") pod \"whisker-558c5f5677-d22kz\" (UID: \"8c1a0e12-92f0-4ce7-8d7e-8e3385289a82\") " pod="calico-system/whisker-558c5f5677-d22kz" Jul 14 23:12:30.132264 kubelet[2110]: I0714 23:12:30.132177 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5c9h7\" (UniqueName: \"kubernetes.io/projected/e7202260-029d-49c9-8ec8-f068238e9e8b-kube-api-access-5c9h7\") pod \"coredns-674b8bbfcf-kzc7l\" (UID: \"e7202260-029d-49c9-8ec8-f068238e9e8b\") " pod="kube-system/coredns-674b8bbfcf-kzc7l" Jul 14 23:12:30.132264 kubelet[2110]: I0714 23:12:30.132186 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xngbq\" (UniqueName: \"kubernetes.io/projected/12707600-10bf-4bfb-be4a-9dc5ca0bfb2f-kube-api-access-xngbq\") pod \"calico-apiserver-5945579587-z48mb\" (UID: \"12707600-10bf-4bfb-be4a-9dc5ca0bfb2f\") " pod="calico-apiserver/calico-apiserver-5945579587-z48mb" Jul 14 23:12:30.132371 kubelet[2110]: I0714 23:12:30.132201 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/e7202260-029d-49c9-8ec8-f068238e9e8b-config-volume\") pod \"coredns-674b8bbfcf-kzc7l\" (UID: \"e7202260-029d-49c9-8ec8-f068238e9e8b\") " pod="kube-system/coredns-674b8bbfcf-kzc7l" Jul 14 23:12:30.132371 kubelet[2110]: I0714 23:12:30.132216 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82-whisker-ca-bundle\") pod \"whisker-558c5f5677-d22kz\" (UID: \"8c1a0e12-92f0-4ce7-8d7e-8e3385289a82\") " pod="calico-system/whisker-558c5f5677-d22kz" Jul 14 23:12:30.146914 systemd[1]: Created slice kubepods-besteffort-pod35477ad0_0bd5_4d19_a21c_4649c1795360.slice. Jul 14 23:12:30.151501 systemd[1]: Created slice kubepods-besteffort-pod7feea4cf_3784_4958_94d9_d27a301767bf.slice. Jul 14 23:12:30.157063 systemd[1]: Created slice kubepods-burstable-pod90c22131_18df_4c3c_beb0_cd3387b6f0f1.slice. Jul 14 23:12:30.164183 systemd[1]: Created slice kubepods-besteffort-pod8c1a0e12_92f0_4ce7_8d7e_8e3385289a82.slice. Jul 14 23:12:30.181710 systemd[1]: Created slice kubepods-besteffort-pod5eaa0559_9369_4157_b0a8_d3529d54a14d.slice. Jul 14 23:12:30.189669 systemd[1]: Created slice kubepods-burstable-pode7202260_029d_49c9_8ec8_f068238e9e8b.slice. Jul 14 23:12:30.232572 kubelet[2110]: I0714 23:12:30.232545 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9tm7c\" (UniqueName: \"kubernetes.io/projected/5eaa0559-9369-4157-b0a8-d3529d54a14d-kube-api-access-9tm7c\") pod \"goldmane-768f4c5c69-hc4sl\" (UID: \"5eaa0559-9369-4157-b0a8-d3529d54a14d\") " pod="calico-system/goldmane-768f4c5c69-hc4sl" Jul 14 23:12:30.233043 kubelet[2110]: I0714 23:12:30.233028 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/5eaa0559-9369-4157-b0a8-d3529d54a14d-config\") pod \"goldmane-768f4c5c69-hc4sl\" (UID: \"5eaa0559-9369-4157-b0a8-d3529d54a14d\") " pod="calico-system/goldmane-768f4c5c69-hc4sl" Jul 14 23:12:30.233195 kubelet[2110]: I0714 23:12:30.233183 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/90c22131-18df-4c3c-beb0-cd3387b6f0f1-config-volume\") pod \"coredns-674b8bbfcf-2z774\" (UID: \"90c22131-18df-4c3c-beb0-cd3387b6f0f1\") " pod="kube-system/coredns-674b8bbfcf-2z774" Jul 14 23:12:30.234102 kubelet[2110]: I0714 23:12:30.234080 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vpg8g\" (UniqueName: \"kubernetes.io/projected/90c22131-18df-4c3c-beb0-cd3387b6f0f1-kube-api-access-vpg8g\") pod \"coredns-674b8bbfcf-2z774\" (UID: \"90c22131-18df-4c3c-beb0-cd3387b6f0f1\") " pod="kube-system/coredns-674b8bbfcf-2z774" Jul 14 23:12:30.234163 kubelet[2110]: I0714 23:12:30.234133 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/7feea4cf-3784-4958-94d9-d27a301767bf-calico-apiserver-certs\") pod \"calico-apiserver-5945579587-t5992\" (UID: \"7feea4cf-3784-4958-94d9-d27a301767bf\") " pod="calico-apiserver/calico-apiserver-5945579587-t5992" Jul 14 23:12:30.234163 kubelet[2110]: I0714 23:12:30.234149 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-srtqm\" (UniqueName: \"kubernetes.io/projected/7feea4cf-3784-4958-94d9-d27a301767bf-kube-api-access-srtqm\") pod \"calico-apiserver-5945579587-t5992\" (UID: \"7feea4cf-3784-4958-94d9-d27a301767bf\") " pod="calico-apiserver/calico-apiserver-5945579587-t5992" Jul 14 23:12:30.234232 kubelet[2110]: I0714 23:12:30.234165 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5eaa0559-9369-4157-b0a8-d3529d54a14d-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-hc4sl\" (UID: \"5eaa0559-9369-4157-b0a8-d3529d54a14d\") " pod="calico-system/goldmane-768f4c5c69-hc4sl" Jul 14 23:12:30.234232 kubelet[2110]: I0714 23:12:30.234176 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/5eaa0559-9369-4157-b0a8-d3529d54a14d-goldmane-key-pair\") pod \"goldmane-768f4c5c69-hc4sl\" (UID: \"5eaa0559-9369-4157-b0a8-d3529d54a14d\") " pod="calico-system/goldmane-768f4c5c69-hc4sl" Jul 14 23:12:30.434233 env[1247]: time="2025-07-14T23:12:30.434198565Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5945579587-z48mb,Uid:12707600-10bf-4bfb-be4a-9dc5ca0bfb2f,Namespace:calico-apiserver,Attempt:0,}" Jul 14 23:12:30.450463 env[1247]: time="2025-07-14T23:12:30.450241756Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6dfbf78cff-fbjqb,Uid:35477ad0-0bd5-4d19-a21c-4649c1795360,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:30.459076 env[1247]: time="2025-07-14T23:12:30.458882058Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5945579587-t5992,Uid:7feea4cf-3784-4958-94d9-d27a301767bf,Namespace:calico-apiserver,Attempt:0,}" Jul 14 23:12:30.461382 env[1247]: time="2025-07-14T23:12:30.461353002Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-2z774,Uid:90c22131-18df-4c3c-beb0-cd3387b6f0f1,Namespace:kube-system,Attempt:0,}" Jul 14 23:12:30.477277 env[1247]: time="2025-07-14T23:12:30.477242020Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-558c5f5677-d22kz,Uid:8c1a0e12-92f0-4ce7-8d7e-8e3385289a82,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:30.485329 env[1247]: time="2025-07-14T23:12:30.485300190Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-hc4sl,Uid:5eaa0559-9369-4157-b0a8-d3529d54a14d,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:30.492961 env[1247]: time="2025-07-14T23:12:30.492934040Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-kzc7l,Uid:e7202260-029d-49c9-8ec8-f068238e9e8b,Namespace:kube-system,Attempt:0,}" Jul 14 23:12:30.713278 systemd[1]: Created slice kubepods-besteffort-podc6c195e3_b7bd_48dc_b09c_98461d031cf2.slice. Jul 14 23:12:30.715776 env[1247]: time="2025-07-14T23:12:30.715728743Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f8fg8,Uid:c6c195e3-b7bd-48dc-b09c-98461d031cf2,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:30.819898 env[1247]: time="2025-07-14T23:12:30.819876828Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 14 23:12:30.945781 env[1247]: time="2025-07-14T23:12:30.944035620Z" level=error msg="Failed to destroy network for sandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.946068 env[1247]: time="2025-07-14T23:12:30.946039399Z" level=error msg="encountered an error cleaning up failed sandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.953221 env[1247]: time="2025-07-14T23:12:30.946079659Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-2z774,Uid:90c22131-18df-4c3c-beb0-cd3387b6f0f1,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.953283 kubelet[2110]: E0714 23:12:30.946270 2110 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.960292 env[1247]: time="2025-07-14T23:12:30.960251630Z" level=error msg="Failed to destroy network for sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.960544 env[1247]: time="2025-07-14T23:12:30.960519936Z" level=error msg="encountered an error cleaning up failed sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.969016 env[1247]: time="2025-07-14T23:12:30.960560766Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-hc4sl,Uid:5eaa0559-9369-4157-b0a8-d3529d54a14d,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.969016 env[1247]: time="2025-07-14T23:12:30.966158237Z" level=error msg="Failed to destroy network for sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.969016 env[1247]: time="2025-07-14T23:12:30.966384924Z" level=error msg="encountered an error cleaning up failed sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.969016 env[1247]: time="2025-07-14T23:12:30.966415665Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f8fg8,Uid:c6c195e3-b7bd-48dc-b09c-98461d031cf2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.969170 kubelet[2110]: E0714 23:12:30.960714 2110 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.969170 kubelet[2110]: E0714 23:12:30.968008 2110 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-hc4sl" Jul 14 23:12:30.969170 kubelet[2110]: E0714 23:12:30.968053 2110 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-hc4sl" Jul 14 23:12:30.969264 kubelet[2110]: E0714 23:12:30.968090 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-hc4sl_calico-system(5eaa0559-9369-4157-b0a8-d3529d54a14d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-hc4sl_calico-system(5eaa0559-9369-4157-b0a8-d3529d54a14d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-hc4sl" podUID="5eaa0559-9369-4157-b0a8-d3529d54a14d" Jul 14 23:12:30.969844 env[1247]: time="2025-07-14T23:12:30.969570019Z" level=error msg="Failed to destroy network for sandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.970125 env[1247]: time="2025-07-14T23:12:30.969884581Z" level=error msg="encountered an error cleaning up failed sandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.970125 env[1247]: time="2025-07-14T23:12:30.969931609Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5945579587-t5992,Uid:7feea4cf-3784-4958-94d9-d27a301767bf,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.970257 kubelet[2110]: E0714 23:12:30.969981 2110 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.970257 kubelet[2110]: E0714 23:12:30.970016 2110 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-f8fg8" Jul 14 23:12:30.970257 kubelet[2110]: E0714 23:12:30.970033 2110 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-f8fg8" Jul 14 23:12:30.970479 kubelet[2110]: E0714 23:12:30.970357 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-f8fg8_calico-system(c6c195e3-b7bd-48dc-b09c-98461d031cf2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-f8fg8_calico-system(c6c195e3-b7bd-48dc-b09c-98461d031cf2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-f8fg8" podUID="c6c195e3-b7bd-48dc-b09c-98461d031cf2" Jul 14 23:12:30.970479 kubelet[2110]: E0714 23:12:30.970416 2110 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.970479 kubelet[2110]: E0714 23:12:30.970431 2110 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5945579587-t5992" Jul 14 23:12:30.970581 kubelet[2110]: E0714 23:12:30.970440 2110 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5945579587-t5992" Jul 14 23:12:30.970581 kubelet[2110]: E0714 23:12:30.970457 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5945579587-t5992_calico-apiserver(7feea4cf-3784-4958-94d9-d27a301767bf)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5945579587-t5992_calico-apiserver(7feea4cf-3784-4958-94d9-d27a301767bf)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5945579587-t5992" podUID="7feea4cf-3784-4958-94d9-d27a301767bf" Jul 14 23:12:30.970716 env[1247]: time="2025-07-14T23:12:30.970693303Z" level=error msg="Failed to destroy network for sandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.971195 kubelet[2110]: E0714 23:12:30.971105 2110 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-2z774" Jul 14 23:12:30.971195 kubelet[2110]: E0714 23:12:30.971127 2110 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-2z774" Jul 14 23:12:30.971195 kubelet[2110]: E0714 23:12:30.971153 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-2z774_kube-system(90c22131-18df-4c3c-beb0-cd3387b6f0f1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-2z774_kube-system(90c22131-18df-4c3c-beb0-cd3387b6f0f1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-2z774" podUID="90c22131-18df-4c3c-beb0-cd3387b6f0f1" Jul 14 23:12:30.971433 env[1247]: time="2025-07-14T23:12:30.971348502Z" level=error msg="Failed to destroy network for sandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.971693 env[1247]: time="2025-07-14T23:12:30.971674955Z" level=error msg="encountered an error cleaning up failed sandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.971799 env[1247]: time="2025-07-14T23:12:30.971782392Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6dfbf78cff-fbjqb,Uid:35477ad0-0bd5-4d19-a21c-4649c1795360,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.972096 env[1247]: time="2025-07-14T23:12:30.972005639Z" level=error msg="encountered an error cleaning up failed sandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.972345 kubelet[2110]: E0714 23:12:30.972205 2110 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.972345 kubelet[2110]: E0714 23:12:30.972283 2110 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6dfbf78cff-fbjqb" Jul 14 23:12:30.972345 kubelet[2110]: E0714 23:12:30.972296 2110 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6dfbf78cff-fbjqb" Jul 14 23:12:30.977189 kubelet[2110]: E0714 23:12:30.972326 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6dfbf78cff-fbjqb_calico-system(35477ad0-0bd5-4d19-a21c-4649c1795360)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6dfbf78cff-fbjqb_calico-system(35477ad0-0bd5-4d19-a21c-4649c1795360)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6dfbf78cff-fbjqb" podUID="35477ad0-0bd5-4d19-a21c-4649c1795360" Jul 14 23:12:30.977189 kubelet[2110]: E0714 23:12:30.972838 2110 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.977189 kubelet[2110]: E0714 23:12:30.972855 2110 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5945579587-z48mb" Jul 14 23:12:30.985508 env[1247]: time="2025-07-14T23:12:30.972458657Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-kzc7l,Uid:e7202260-029d-49c9-8ec8-f068238e9e8b,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.985508 env[1247]: time="2025-07-14T23:12:30.972031774Z" level=error msg="Failed to destroy network for sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.985508 env[1247]: time="2025-07-14T23:12:30.972047652Z" level=error msg="Failed to destroy network for sandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.985508 env[1247]: time="2025-07-14T23:12:30.972698525Z" level=error msg="encountered an error cleaning up failed sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.985508 env[1247]: time="2025-07-14T23:12:30.972724356Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5945579587-z48mb,Uid:12707600-10bf-4bfb-be4a-9dc5ca0bfb2f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.985508 env[1247]: time="2025-07-14T23:12:30.972767517Z" level=error msg="encountered an error cleaning up failed sandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.985508 env[1247]: time="2025-07-14T23:12:30.972790244Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-558c5f5677-d22kz,Uid:8c1a0e12-92f0-4ce7-8d7e-8e3385289a82,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.985838 kubelet[2110]: E0714 23:12:30.972864 2110 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5945579587-z48mb" Jul 14 23:12:30.985838 kubelet[2110]: E0714 23:12:30.972885 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5945579587-z48mb_calico-apiserver(12707600-10bf-4bfb-be4a-9dc5ca0bfb2f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5945579587-z48mb_calico-apiserver(12707600-10bf-4bfb-be4a-9dc5ca0bfb2f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5945579587-z48mb" podUID="12707600-10bf-4bfb-be4a-9dc5ca0bfb2f" Jul 14 23:12:30.985838 kubelet[2110]: E0714 23:12:30.972907 2110 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.985974 kubelet[2110]: E0714 23:12:30.972917 2110 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-kzc7l" Jul 14 23:12:30.985974 kubelet[2110]: E0714 23:12:30.972925 2110 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-kzc7l" Jul 14 23:12:30.985974 kubelet[2110]: E0714 23:12:30.972942 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-kzc7l_kube-system(e7202260-029d-49c9-8ec8-f068238e9e8b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-kzc7l_kube-system(e7202260-029d-49c9-8ec8-f068238e9e8b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-kzc7l" podUID="e7202260-029d-49c9-8ec8-f068238e9e8b" Jul 14 23:12:30.986080 kubelet[2110]: E0714 23:12:30.972997 2110 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.986080 kubelet[2110]: E0714 23:12:30.973010 2110 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-558c5f5677-d22kz" Jul 14 23:12:30.986080 kubelet[2110]: E0714 23:12:30.973018 2110 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-558c5f5677-d22kz" Jul 14 23:12:30.986157 kubelet[2110]: E0714 23:12:30.973033 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-558c5f5677-d22kz_calico-system(8c1a0e12-92f0-4ce7-8d7e-8e3385289a82)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-558c5f5677-d22kz_calico-system(8c1a0e12-92f0-4ce7-8d7e-8e3385289a82)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-558c5f5677-d22kz" podUID="8c1a0e12-92f0-4ce7-8d7e-8e3385289a82" Jul 14 23:12:31.817291 kubelet[2110]: I0714 23:12:31.817275 2110 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:12:31.818314 kubelet[2110]: I0714 23:12:31.818305 2110 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:12:31.826557 kubelet[2110]: I0714 23:12:31.826537 2110 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:12:31.827270 kubelet[2110]: I0714 23:12:31.827260 2110 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:12:31.827917 kubelet[2110]: I0714 23:12:31.827908 2110 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:12:31.828463 kubelet[2110]: I0714 23:12:31.828454 2110 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:12:31.829038 kubelet[2110]: I0714 23:12:31.829030 2110 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:12:31.829592 kubelet[2110]: I0714 23:12:31.829582 2110 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:12:31.831402 env[1247]: time="2025-07-14T23:12:31.831373320Z" level=info msg="StopPodSandbox for \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\"" Jul 14 23:12:31.831652 env[1247]: time="2025-07-14T23:12:31.831635425Z" level=info msg="StopPodSandbox for \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\"" Jul 14 23:12:31.831820 env[1247]: time="2025-07-14T23:12:31.831804058Z" level=info msg="StopPodSandbox for \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\"" Jul 14 23:12:31.831957 env[1247]: time="2025-07-14T23:12:31.831938132Z" level=info msg="StopPodSandbox for \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\"" Jul 14 23:12:31.832090 env[1247]: time="2025-07-14T23:12:31.832076965Z" level=info msg="StopPodSandbox for \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\"" Jul 14 23:12:31.832227 env[1247]: time="2025-07-14T23:12:31.832212668Z" level=info msg="StopPodSandbox for \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\"" Jul 14 23:12:31.832384 env[1247]: time="2025-07-14T23:12:31.832364693Z" level=info msg="StopPodSandbox for \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\"" Jul 14 23:12:31.832515 env[1247]: time="2025-07-14T23:12:31.832496865Z" level=info msg="StopPodSandbox for \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\"" Jul 14 23:12:31.856094 env[1247]: time="2025-07-14T23:12:31.856056234Z" level=error msg="StopPodSandbox for \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\" failed" error="failed to destroy network for sandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.856538 kubelet[2110]: E0714 23:12:31.856321 2110 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:12:31.856538 kubelet[2110]: E0714 23:12:31.856437 2110 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8"} Jul 14 23:12:31.856538 kubelet[2110]: E0714 23:12:31.856496 2110 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7feea4cf-3784-4958-94d9-d27a301767bf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.856538 kubelet[2110]: E0714 23:12:31.856514 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7feea4cf-3784-4958-94d9-d27a301767bf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5945579587-t5992" podUID="7feea4cf-3784-4958-94d9-d27a301767bf" Jul 14 23:12:31.884498 env[1247]: time="2025-07-14T23:12:31.884454693Z" level=error msg="StopPodSandbox for \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\" failed" error="failed to destroy network for sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.885003 kubelet[2110]: E0714 23:12:31.884896 2110 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:12:31.885003 kubelet[2110]: E0714 23:12:31.884942 2110 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2"} Jul 14 23:12:31.885003 kubelet[2110]: E0714 23:12:31.884965 2110 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"12707600-10bf-4bfb-be4a-9dc5ca0bfb2f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.885003 kubelet[2110]: E0714 23:12:31.884979 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"12707600-10bf-4bfb-be4a-9dc5ca0bfb2f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5945579587-z48mb" podUID="12707600-10bf-4bfb-be4a-9dc5ca0bfb2f" Jul 14 23:12:31.888183 env[1247]: time="2025-07-14T23:12:31.888124885Z" level=error msg="StopPodSandbox for \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\" failed" error="failed to destroy network for sandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.888452 kubelet[2110]: E0714 23:12:31.888341 2110 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:12:31.888452 kubelet[2110]: E0714 23:12:31.888382 2110 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e"} Jul 14 23:12:31.888452 kubelet[2110]: E0714 23:12:31.888404 2110 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"35477ad0-0bd5-4d19-a21c-4649c1795360\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.888452 kubelet[2110]: E0714 23:12:31.888417 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"35477ad0-0bd5-4d19-a21c-4649c1795360\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6dfbf78cff-fbjqb" podUID="35477ad0-0bd5-4d19-a21c-4649c1795360" Jul 14 23:12:31.906772 env[1247]: time="2025-07-14T23:12:31.906698822Z" level=error msg="StopPodSandbox for \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\" failed" error="failed to destroy network for sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.907272 kubelet[2110]: E0714 23:12:31.907113 2110 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:12:31.907272 kubelet[2110]: E0714 23:12:31.907154 2110 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825"} Jul 14 23:12:31.907272 kubelet[2110]: E0714 23:12:31.907205 2110 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5eaa0559-9369-4157-b0a8-d3529d54a14d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.907272 kubelet[2110]: E0714 23:12:31.907228 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5eaa0559-9369-4157-b0a8-d3529d54a14d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-hc4sl" podUID="5eaa0559-9369-4157-b0a8-d3529d54a14d" Jul 14 23:12:31.916278 env[1247]: time="2025-07-14T23:12:31.916217578Z" level=error msg="StopPodSandbox for \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\" failed" error="failed to destroy network for sandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.916696 kubelet[2110]: E0714 23:12:31.916557 2110 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:12:31.916696 kubelet[2110]: E0714 23:12:31.916610 2110 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708"} Jul 14 23:12:31.916696 kubelet[2110]: E0714 23:12:31.916641 2110 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e7202260-029d-49c9-8ec8-f068238e9e8b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.916696 kubelet[2110]: E0714 23:12:31.916663 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e7202260-029d-49c9-8ec8-f068238e9e8b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-kzc7l" podUID="e7202260-029d-49c9-8ec8-f068238e9e8b" Jul 14 23:12:31.917077 env[1247]: time="2025-07-14T23:12:31.917048894Z" level=error msg="StopPodSandbox for \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\" failed" error="failed to destroy network for sandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.917379 kubelet[2110]: E0714 23:12:31.917259 2110 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:12:31.917379 kubelet[2110]: E0714 23:12:31.917297 2110 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8"} Jul 14 23:12:31.917379 kubelet[2110]: E0714 23:12:31.917322 2110 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8c1a0e12-92f0-4ce7-8d7e-8e3385289a82\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.917379 kubelet[2110]: E0714 23:12:31.917342 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8c1a0e12-92f0-4ce7-8d7e-8e3385289a82\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-558c5f5677-d22kz" podUID="8c1a0e12-92f0-4ce7-8d7e-8e3385289a82" Jul 14 23:12:31.919182 env[1247]: time="2025-07-14T23:12:31.919144867Z" level=error msg="StopPodSandbox for \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\" failed" error="failed to destroy network for sandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.919517 kubelet[2110]: E0714 23:12:31.919382 2110 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:12:31.919517 kubelet[2110]: E0714 23:12:31.919434 2110 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121"} Jul 14 23:12:31.919517 kubelet[2110]: E0714 23:12:31.919462 2110 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"90c22131-18df-4c3c-beb0-cd3387b6f0f1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.919517 kubelet[2110]: E0714 23:12:31.919494 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"90c22131-18df-4c3c-beb0-cd3387b6f0f1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-2z774" podUID="90c22131-18df-4c3c-beb0-cd3387b6f0f1" Jul 14 23:12:31.926568 env[1247]: time="2025-07-14T23:12:31.926526277Z" level=error msg="StopPodSandbox for \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\" failed" error="failed to destroy network for sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.927024 kubelet[2110]: E0714 23:12:31.926864 2110 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:12:31.927024 kubelet[2110]: E0714 23:12:31.926905 2110 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676"} Jul 14 23:12:31.927024 kubelet[2110]: E0714 23:12:31.926951 2110 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c6c195e3-b7bd-48dc-b09c-98461d031cf2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.927024 kubelet[2110]: E0714 23:12:31.926974 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c6c195e3-b7bd-48dc-b09c-98461d031cf2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-f8fg8" podUID="c6c195e3-b7bd-48dc-b09c-98461d031cf2" Jul 14 23:12:42.127294 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3237552757.mount: Deactivated successfully. Jul 14 23:12:42.306509 env[1247]: time="2025-07-14T23:12:42.306462164Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:42.319263 env[1247]: time="2025-07-14T23:12:42.319236843Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:42.325268 env[1247]: time="2025-07-14T23:12:42.325237247Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:42.330049 env[1247]: time="2025-07-14T23:12:42.330015776Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:42.330547 env[1247]: time="2025-07-14T23:12:42.330525751Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 14 23:12:42.371145 env[1247]: time="2025-07-14T23:12:42.371121753Z" level=info msg="CreateContainer within sandbox \"a72f99f3f61b6c83a26cac4cee7f6b6c1bfabcc5ce77ac31978072c8b3ccbd4d\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 14 23:12:42.387397 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2268390179.mount: Deactivated successfully. Jul 14 23:12:42.390655 env[1247]: time="2025-07-14T23:12:42.390633773Z" level=info msg="CreateContainer within sandbox \"a72f99f3f61b6c83a26cac4cee7f6b6c1bfabcc5ce77ac31978072c8b3ccbd4d\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"0fe4d0dd5ab9b603c144e181cc74daeaa790082b5c62ddea61a150a76e383f6e\"" Jul 14 23:12:42.392016 env[1247]: time="2025-07-14T23:12:42.391193417Z" level=info msg="StartContainer for \"0fe4d0dd5ab9b603c144e181cc74daeaa790082b5c62ddea61a150a76e383f6e\"" Jul 14 23:12:42.409041 systemd[1]: Started cri-containerd-0fe4d0dd5ab9b603c144e181cc74daeaa790082b5c62ddea61a150a76e383f6e.scope. Jul 14 23:12:42.431000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.467243 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 14 23:12:42.493736 kernel: audit: type=1400 audit(1752534762.431:1015): avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.494179 kernel: audit: type=1300 audit(1752534762.431:1015): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fb79ed44bd8 items=0 ppid=2612 pid=3265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:42.494209 kernel: audit: type=1327 audit(1752534762.431:1015): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066653464306464356162396236303363313434653138316363373464 Jul 14 23:12:42.494916 kernel: audit: type=1400 audit(1752534762.431:1016): avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.495591 kernel: audit: type=1400 audit(1752534762.431:1016): avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.495620 kernel: audit: type=1400 audit(1752534762.431:1016): avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.495643 kernel: audit: type=1400 audit(1752534762.431:1016): avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.496878 kernel: audit: type=1400 audit(1752534762.431:1016): avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.497144 kernel: audit: type=1400 audit(1752534762.431:1016): avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.497170 kernel: audit: type=1400 audit(1752534762.431:1016): avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.431000 audit[3265]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fb79ed44bd8 items=0 ppid=2612 pid=3265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:42.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066653464306464356162396236303363313434653138316363373464 Jul 14 23:12:42.431000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.431000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.431000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.431000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.431000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.431000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.431000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.431000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.431000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.431000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.431000 audit: BPF prog-id=136 op=LOAD Jul 14 23:12:42.431000 audit[3265]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000a0518 items=0 ppid=2612 pid=3265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:42.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066653464306464356162396236303363313434653138316363373464 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit: BPF prog-id=137 op=LOAD Jul 14 23:12:42.432000 audit[3265]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000a0568 items=0 ppid=2612 pid=3265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:42.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066653464306464356162396236303363313434653138316363373464 Jul 14 23:12:42.432000 audit: BPF prog-id=137 op=UNLOAD Jul 14 23:12:42.432000 audit: BPF prog-id=136 op=UNLOAD Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { perfmon } for pid=3265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit[3265]: AVC avc: denied { bpf } for pid=3265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.432000 audit: BPF prog-id=138 op=LOAD Jul 14 23:12:42.432000 audit[3265]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000a05f8 items=0 ppid=2612 pid=3265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:42.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066653464306464356162396236303363313434653138316363373464 Jul 14 23:12:42.506913 env[1247]: time="2025-07-14T23:12:42.469595886Z" level=info msg="StartContainer for \"0fe4d0dd5ab9b603c144e181cc74daeaa790082b5c62ddea61a150a76e383f6e\" returns successfully" Jul 14 23:12:42.710653 env[1247]: time="2025-07-14T23:12:42.710563920Z" level=info msg="StopPodSandbox for \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\"" Jul 14 23:12:42.737156 env[1247]: time="2025-07-14T23:12:42.737091520Z" level=error msg="StopPodSandbox for \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\" failed" error="failed to destroy network for sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:42.739727 kubelet[2110]: E0714 23:12:42.739452 2110 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:12:42.739727 kubelet[2110]: E0714 23:12:42.739504 2110 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2"} Jul 14 23:12:42.739727 kubelet[2110]: E0714 23:12:42.739533 2110 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"12707600-10bf-4bfb-be4a-9dc5ca0bfb2f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:42.739727 kubelet[2110]: E0714 23:12:42.739554 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"12707600-10bf-4bfb-be4a-9dc5ca0bfb2f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5945579587-z48mb" podUID="12707600-10bf-4bfb-be4a-9dc5ca0bfb2f" Jul 14 23:12:43.708891 env[1247]: time="2025-07-14T23:12:43.708856203Z" level=info msg="StopPodSandbox for \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\"" Jul 14 23:12:43.710344 env[1247]: time="2025-07-14T23:12:43.709520616Z" level=info msg="StopPodSandbox for \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\"" Jul 14 23:12:43.734851 env[1247]: time="2025-07-14T23:12:43.734819246Z" level=error msg="StopPodSandbox for \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\" failed" error="failed to destroy network for sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:43.735103 kubelet[2110]: E0714 23:12:43.735046 2110 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:12:43.735235 kubelet[2110]: E0714 23:12:43.735085 2110 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825"} Jul 14 23:12:43.735235 kubelet[2110]: E0714 23:12:43.735193 2110 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5eaa0559-9369-4157-b0a8-d3529d54a14d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:43.735235 kubelet[2110]: E0714 23:12:43.735208 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5eaa0559-9369-4157-b0a8-d3529d54a14d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-hc4sl" podUID="5eaa0559-9369-4157-b0a8-d3529d54a14d" Jul 14 23:12:43.738489 env[1247]: time="2025-07-14T23:12:43.738461160Z" level=error msg="StopPodSandbox for \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\" failed" error="failed to destroy network for sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:43.745654 kubelet[2110]: E0714 23:12:43.738587 2110 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:12:43.745654 kubelet[2110]: E0714 23:12:43.738606 2110 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676"} Jul 14 23:12:43.745654 kubelet[2110]: E0714 23:12:43.738621 2110 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c6c195e3-b7bd-48dc-b09c-98461d031cf2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:43.745654 kubelet[2110]: E0714 23:12:43.738632 2110 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c6c195e3-b7bd-48dc-b09c-98461d031cf2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-f8fg8" podUID="c6c195e3-b7bd-48dc-b09c-98461d031cf2" Jul 14 23:12:43.947592 kubelet[2110]: I0714 23:12:43.947566 2110 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:12:44.109330 systemd[1]: run-containerd-runc-k8s.io-0fe4d0dd5ab9b603c144e181cc74daeaa790082b5c62ddea61a150a76e383f6e-runc.Z6dSab.mount: Deactivated successfully. Jul 14 23:12:44.310016 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 14 23:12:44.310124 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 14 23:12:44.351384 systemd[1]: run-containerd-runc-k8s.io-0fe4d0dd5ab9b603c144e181cc74daeaa790082b5c62ddea61a150a76e383f6e-runc.kaHr0O.mount: Deactivated successfully. Jul 14 23:12:44.683103 kubelet[2110]: I0714 23:12:44.683009 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-c2tpx" podStartSLOduration=3.006069868 podStartE2EDuration="29.672627513s" podCreationTimestamp="2025-07-14 23:12:15 +0000 UTC" firstStartedPulling="2025-07-14 23:12:15.664632231 +0000 UTC m=+17.141238728" lastFinishedPulling="2025-07-14 23:12:42.331189872 +0000 UTC m=+43.807796373" observedRunningTime="2025-07-14 23:12:42.902118324 +0000 UTC m=+44.378724834" watchObservedRunningTime="2025-07-14 23:12:44.672627513 +0000 UTC m=+46.149234016" Jul 14 23:12:44.687042 env[1247]: time="2025-07-14T23:12:44.687020282Z" level=info msg="StopPodSandbox for \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\"" Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:44.781 [INFO][3408] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:44.781 [INFO][3408] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" iface="eth0" netns="/var/run/netns/cni-e88c1547-24ee-1f4a-61ea-734a8231eb5f" Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:44.781 [INFO][3408] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" iface="eth0" netns="/var/run/netns/cni-e88c1547-24ee-1f4a-61ea-734a8231eb5f" Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:44.785 [INFO][3408] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" iface="eth0" netns="/var/run/netns/cni-e88c1547-24ee-1f4a-61ea-734a8231eb5f" Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:44.785 [INFO][3408] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:44.785 [INFO][3408] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:45.306 [INFO][3415] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" HandleID="k8s-pod-network.ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Workload="localhost-k8s-whisker--558c5f5677--d22kz-eth0" Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:45.317 [INFO][3415] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:45.322 [INFO][3415] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:45.372 [WARNING][3415] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" HandleID="k8s-pod-network.ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Workload="localhost-k8s-whisker--558c5f5677--d22kz-eth0" Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:45.373 [INFO][3415] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" HandleID="k8s-pod-network.ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Workload="localhost-k8s-whisker--558c5f5677--d22kz-eth0" Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:45.374 [INFO][3415] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:45.377988 env[1247]: 2025-07-14 23:12:45.376 [INFO][3408] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:12:45.380994 systemd[1]: run-netns-cni\x2de88c1547\x2d24ee\x2d1f4a\x2d61ea\x2d734a8231eb5f.mount: Deactivated successfully. Jul 14 23:12:45.381538 env[1247]: time="2025-07-14T23:12:45.381495200Z" level=info msg="TearDown network for sandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\" successfully" Jul 14 23:12:45.381622 env[1247]: time="2025-07-14T23:12:45.381608581Z" level=info msg="StopPodSandbox for \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\" returns successfully" Jul 14 23:12:45.562111 kubelet[2110]: I0714 23:12:45.562083 2110 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-rvs7t\" (UniqueName: \"kubernetes.io/projected/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82-kube-api-access-rvs7t\") pod \"8c1a0e12-92f0-4ce7-8d7e-8e3385289a82\" (UID: \"8c1a0e12-92f0-4ce7-8d7e-8e3385289a82\") " Jul 14 23:12:45.562391 kubelet[2110]: I0714 23:12:45.562374 2110 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82-whisker-ca-bundle\") pod \"8c1a0e12-92f0-4ce7-8d7e-8e3385289a82\" (UID: \"8c1a0e12-92f0-4ce7-8d7e-8e3385289a82\") " Jul 14 23:12:45.562473 kubelet[2110]: I0714 23:12:45.562464 2110 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82-whisker-backend-key-pair\") pod \"8c1a0e12-92f0-4ce7-8d7e-8e3385289a82\" (UID: \"8c1a0e12-92f0-4ce7-8d7e-8e3385289a82\") " Jul 14 23:12:45.569432 systemd[1]: var-lib-kubelet-pods-8c1a0e12\x2d92f0\x2d4ce7\x2d8d7e\x2d8e3385289a82-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 14 23:12:45.572303 kubelet[2110]: I0714 23:12:45.569875 2110 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "8c1a0e12-92f0-4ce7-8d7e-8e3385289a82" (UID: "8c1a0e12-92f0-4ce7-8d7e-8e3385289a82"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 14 23:12:45.572602 systemd[1]: var-lib-kubelet-pods-8c1a0e12\x2d92f0\x2d4ce7\x2d8d7e\x2d8e3385289a82-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2drvs7t.mount: Deactivated successfully. Jul 14 23:12:45.572785 kubelet[2110]: I0714 23:12:45.570707 2110 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "8c1a0e12-92f0-4ce7-8d7e-8e3385289a82" (UID: "8c1a0e12-92f0-4ce7-8d7e-8e3385289a82"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 14 23:12:45.576107 kubelet[2110]: I0714 23:12:45.576069 2110 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82-kube-api-access-rvs7t" (OuterVolumeSpecName: "kube-api-access-rvs7t") pod "8c1a0e12-92f0-4ce7-8d7e-8e3385289a82" (UID: "8c1a0e12-92f0-4ce7-8d7e-8e3385289a82"). InnerVolumeSpecName "kube-api-access-rvs7t". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 14 23:12:45.664133 kubelet[2110]: I0714 23:12:45.663121 2110 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 14 23:12:45.664133 kubelet[2110]: I0714 23:12:45.663145 2110 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 14 23:12:45.664133 kubelet[2110]: I0714 23:12:45.663151 2110 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-rvs7t\" (UniqueName: \"kubernetes.io/projected/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82-kube-api-access-rvs7t\") on node \"localhost\" DevicePath \"\"" Jul 14 23:12:45.709522 env[1247]: time="2025-07-14T23:12:45.709267235Z" level=info msg="StopPodSandbox for \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\"" Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.738 [INFO][3443] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.738 [INFO][3443] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" iface="eth0" netns="/var/run/netns/cni-af42e57e-ae34-5abc-b365-1dada81210c6" Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.738 [INFO][3443] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" iface="eth0" netns="/var/run/netns/cni-af42e57e-ae34-5abc-b365-1dada81210c6" Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.739 [INFO][3443] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" iface="eth0" netns="/var/run/netns/cni-af42e57e-ae34-5abc-b365-1dada81210c6" Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.739 [INFO][3443] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.739 [INFO][3443] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.762 [INFO][3450] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" HandleID="k8s-pod-network.f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Workload="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.762 [INFO][3450] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.762 [INFO][3450] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.770 [WARNING][3450] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" HandleID="k8s-pod-network.f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Workload="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.770 [INFO][3450] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" HandleID="k8s-pod-network.f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Workload="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.771 [INFO][3450] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:45.774433 env[1247]: 2025-07-14 23:12:45.773 [INFO][3443] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:12:45.781723 env[1247]: time="2025-07-14T23:12:45.776409091Z" level=info msg="TearDown network for sandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\" successfully" Jul 14 23:12:45.781723 env[1247]: time="2025-07-14T23:12:45.776431447Z" level=info msg="StopPodSandbox for \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\" returns successfully" Jul 14 23:12:45.781723 env[1247]: time="2025-07-14T23:12:45.777460527Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5945579587-t5992,Uid:7feea4cf-3784-4958-94d9-d27a301767bf,Namespace:calico-apiserver,Attempt:1,}" Jul 14 23:12:45.776454 systemd[1]: run-netns-cni\x2daf42e57e\x2dae34\x2d5abc\x2db365\x2d1dada81210c6.mount: Deactivated successfully. Jul 14 23:12:45.872511 systemd[1]: Removed slice kubepods-besteffort-pod8c1a0e12_92f0_4ce7_8d7e_8e3385289a82.slice. Jul 14 23:12:45.970718 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 23:12:45.970827 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliaedfff3e95c: link becomes ready Jul 14 23:12:45.976000 audit[3524]: AVC avc: denied { write } for pid=3524 comm="tee" name="fd" dev="proc" ino=36957 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:45.976000 audit[3524]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc03b1d7e9 a2=241 a3=1b6 items=1 ppid=3485 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.976000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 14 23:12:45.976000 audit: PATH item=0 name="/dev/fd/63" inode=36946 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:45.976000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.828 [INFO][3456] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.844 [INFO][3456] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5945579587--t5992-eth0 calico-apiserver-5945579587- calico-apiserver 7feea4cf-3784-4958-94d9-d27a301767bf 939 0 2025-07-14 23:12:12 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5945579587 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5945579587-t5992 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] caliaedfff3e95c [] [] }} ContainerID="b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-t5992" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--t5992-" Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.844 [INFO][3456] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-t5992" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.862 [INFO][3469] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" HandleID="k8s-pod-network.b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" Workload="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.862 [INFO][3469] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" HandleID="k8s-pod-network.b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" Workload="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000251210), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5945579587-t5992", "timestamp":"2025-07-14 23:12:45.862293393 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.862 [INFO][3469] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.862 [INFO][3469] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.862 [INFO][3469] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.887 [INFO][3469] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" host="localhost" Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.903 [INFO][3469] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.907 [INFO][3469] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.909 [INFO][3469] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.911 [INFO][3469] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.911 [INFO][3469] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" host="localhost" Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.915 [INFO][3469] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7 Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.920 [INFO][3469] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" host="localhost" Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.925 [INFO][3469] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" host="localhost" Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.925 [INFO][3469] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" host="localhost" Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.925 [INFO][3469] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:45.994932 env[1247]: 2025-07-14 23:12:45.925 [INFO][3469] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" HandleID="k8s-pod-network.b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" Workload="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:12:45.988805 systemd-networkd[1061]: caliaedfff3e95c: Link UP Jul 14 23:12:46.004221 env[1247]: 2025-07-14 23:12:45.926 [INFO][3456] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-t5992" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5945579587--t5992-eth0", GenerateName:"calico-apiserver-5945579587-", Namespace:"calico-apiserver", SelfLink:"", UID:"7feea4cf-3784-4958-94d9-d27a301767bf", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5945579587", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5945579587-t5992", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaedfff3e95c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:46.004221 env[1247]: 2025-07-14 23:12:45.927 [INFO][3456] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-t5992" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:12:46.004221 env[1247]: 2025-07-14 23:12:45.927 [INFO][3456] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliaedfff3e95c ContainerID="b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-t5992" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:12:46.004221 env[1247]: 2025-07-14 23:12:45.971 [INFO][3456] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-t5992" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:12:46.004221 env[1247]: 2025-07-14 23:12:45.971 [INFO][3456] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-t5992" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5945579587--t5992-eth0", GenerateName:"calico-apiserver-5945579587-", Namespace:"calico-apiserver", SelfLink:"", UID:"7feea4cf-3784-4958-94d9-d27a301767bf", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5945579587", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7", Pod:"calico-apiserver-5945579587-t5992", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaedfff3e95c", MAC:"1e:65:eb:fb:f2:70", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:46.004221 env[1247]: 2025-07-14 23:12:45.981 [INFO][3456] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-t5992" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:12:46.004221 env[1247]: time="2025-07-14T23:12:46.000386475Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:46.004221 env[1247]: time="2025-07-14T23:12:46.000434566Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:46.004221 env[1247]: time="2025-07-14T23:12:46.000443153Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:45.988944 systemd-networkd[1061]: caliaedfff3e95c: Gained carrier Jul 14 23:12:46.008185 env[1247]: time="2025-07-14T23:12:46.006930259Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7 pid=3576 runtime=io.containerd.runc.v2 Jul 14 23:12:46.030000 audit[3539]: AVC avc: denied { write } for pid=3539 comm="tee" name="fd" dev="proc" ino=38262 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:46.030000 audit[3539]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc9ddb77ea a2=241 a3=1b6 items=1 ppid=3494 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.030000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 14 23:12:46.030000 audit: PATH item=0 name="/dev/fd/63" inode=36947 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:46.035372 systemd[1]: Started cri-containerd-b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7.scope. Jul 14 23:12:46.042000 audit[3546]: AVC avc: denied { write } for pid=3546 comm="tee" name="fd" dev="proc" ino=38283 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:46.042000 audit[3546]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc970287da a2=241 a3=1b6 items=1 ppid=3495 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.042000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 14 23:12:46.042000 audit: PATH item=0 name="/dev/fd/63" inode=36951 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:46.043000 audit[3541]: AVC avc: denied { write } for pid=3541 comm="tee" name="fd" dev="proc" ino=38287 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:46.043000 audit[3541]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcc8cd67eb a2=241 a3=1b6 items=1 ppid=3490 pid=3541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.043000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 14 23:12:46.047000 audit[3543]: AVC avc: denied { write } for pid=3543 comm="tee" name="fd" dev="proc" ino=38289 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:46.048000 audit[3537]: AVC avc: denied { write } for pid=3537 comm="tee" name="fd" dev="proc" ino=38292 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:46.048000 audit[3537]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd98cd07d9 a2=241 a3=1b6 items=1 ppid=3493 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.048000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 14 23:12:46.048000 audit: PATH item=0 name="/dev/fd/63" inode=38204 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:46.048000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:46.030000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:46.047000 audit[3543]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff0b4767e9 a2=241 a3=1b6 items=1 ppid=3487 pid=3543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.047000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 14 23:12:46.047000 audit: PATH item=0 name="/dev/fd/63" inode=36950 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:46.047000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:46.043000 audit: PATH item=0 name="/dev/fd/63" inode=36948 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:46.043000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:46.042000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:46.061000 audit[3549]: AVC avc: denied { write } for pid=3549 comm="tee" name="fd" dev="proc" ino=38307 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:46.061000 audit[3549]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff468db7e9 a2=241 a3=1b6 items=1 ppid=3491 pid=3549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.061000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 14 23:12:46.061000 audit: PATH item=0 name="/dev/fd/63" inode=36952 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:46.061000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:46.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.064000 audit: BPF prog-id=139 op=LOAD Jul 14 23:12:46.065000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.065000 audit[3585]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3576 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230313634633833386334383734636339633233353934313032346535 Jul 14 23:12:46.065000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.065000 audit[3585]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3576 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230313634633833386334383734636339633233353934313032346535 Jul 14 23:12:46.065000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.065000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.065000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.065000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.065000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.065000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.065000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.065000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.065000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.065000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.065000 audit: BPF prog-id=140 op=LOAD Jul 14 23:12:46.065000 audit[3585]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00028e9a0 items=0 ppid=3576 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230313634633833386334383734636339633233353934313032346535 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit: BPF prog-id=141 op=LOAD Jul 14 23:12:46.066000 audit[3585]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00028e9e8 items=0 ppid=3576 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230313634633833386334383734636339633233353934313032346535 Jul 14 23:12:46.066000 audit: BPF prog-id=141 op=UNLOAD Jul 14 23:12:46.066000 audit: BPF prog-id=140 op=UNLOAD Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.066000 audit: BPF prog-id=142 op=LOAD Jul 14 23:12:46.066000 audit[3585]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00028edf8 items=0 ppid=3576 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230313634633833386334383734636339633233353934313032346535 Jul 14 23:12:46.068285 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:46.131176 env[1247]: time="2025-07-14T23:12:46.131137234Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5945579587-t5992,Uid:7feea4cf-3784-4958-94d9-d27a301767bf,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7\"" Jul 14 23:12:46.200374 kubelet[2110]: I0714 23:12:46.200338 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e033abb8-71f7-437b-b442-6cb6283facda-whisker-ca-bundle\") pod \"whisker-6c465469ff-fwz6k\" (UID: \"e033abb8-71f7-437b-b442-6cb6283facda\") " pod="calico-system/whisker-6c465469ff-fwz6k" Jul 14 23:12:46.200522 kubelet[2110]: I0714 23:12:46.200384 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/e033abb8-71f7-437b-b442-6cb6283facda-whisker-backend-key-pair\") pod \"whisker-6c465469ff-fwz6k\" (UID: \"e033abb8-71f7-437b-b442-6cb6283facda\") " pod="calico-system/whisker-6c465469ff-fwz6k" Jul 14 23:12:46.200522 kubelet[2110]: I0714 23:12:46.200396 2110 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bnt86\" (UniqueName: \"kubernetes.io/projected/e033abb8-71f7-437b-b442-6cb6283facda-kube-api-access-bnt86\") pod \"whisker-6c465469ff-fwz6k\" (UID: \"e033abb8-71f7-437b-b442-6cb6283facda\") " pod="calico-system/whisker-6c465469ff-fwz6k" Jul 14 23:12:46.248435 env[1247]: time="2025-07-14T23:12:46.248359086Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 14 23:12:46.317959 systemd[1]: Created slice kubepods-besteffort-pode033abb8_71f7_437b_b442_6cb6283facda.slice. Jul 14 23:12:46.424000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.424000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.424000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.424000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.424000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.424000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.424000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.424000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.424000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.424000 audit: BPF prog-id=143 op=LOAD Jul 14 23:12:46.424000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe81c17070 a2=98 a3=1fffffffffffffff items=0 ppid=3486 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.424000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:12:46.425000 audit: BPF prog-id=143 op=UNLOAD Jul 14 23:12:46.427000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.427000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.427000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.427000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.427000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.427000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.427000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.427000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.427000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.427000 audit: BPF prog-id=144 op=LOAD Jul 14 23:12:46.427000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe81c16f50 a2=94 a3=3 items=0 ppid=3486 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.427000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:12:46.428000 audit: BPF prog-id=144 op=UNLOAD Jul 14 23:12:46.428000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.428000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.428000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.428000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.428000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.428000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.428000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.428000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.428000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.428000 audit: BPF prog-id=145 op=LOAD Jul 14 23:12:46.428000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe81c16f90 a2=94 a3=7ffe81c17170 items=0 ppid=3486 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.428000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:12:46.428000 audit: BPF prog-id=145 op=UNLOAD Jul 14 23:12:46.428000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.428000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffe81c17060 a2=50 a3=a000000085 items=0 ppid=3486 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.428000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:12:46.433000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.433000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.433000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.433000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.433000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.433000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.433000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.433000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.433000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.433000 audit: BPF prog-id=146 op=LOAD Jul 14 23:12:46.433000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff59da8cd0 a2=98 a3=3 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.433000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.434000 audit: BPF prog-id=146 op=UNLOAD Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit: BPF prog-id=147 op=LOAD Jul 14 23:12:46.445000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff59da8ac0 a2=94 a3=54428f items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.445000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.445000 audit: BPF prog-id=147 op=UNLOAD Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.445000 audit: BPF prog-id=148 op=LOAD Jul 14 23:12:46.445000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff59da8af0 a2=94 a3=2 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.445000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.445000 audit: BPF prog-id=148 op=UNLOAD Jul 14 23:12:46.520000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.520000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.520000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.520000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.520000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.520000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.520000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.520000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.520000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.520000 audit: BPF prog-id=149 op=LOAD Jul 14 23:12:46.520000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff59da89b0 a2=94 a3=1 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.520000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.521000 audit: BPF prog-id=149 op=UNLOAD Jul 14 23:12:46.521000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.521000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff59da8a80 a2=50 a3=7fff59da8b60 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.521000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff59da89c0 a2=28 a3=0 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff59da89f0 a2=28 a3=0 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff59da8900 a2=28 a3=0 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff59da8a10 a2=28 a3=0 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff59da89f0 a2=28 a3=0 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff59da89e0 a2=28 a3=0 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff59da8a10 a2=28 a3=0 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff59da89f0 a2=28 a3=0 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff59da8a10 a2=28 a3=0 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff59da89e0 a2=28 a3=0 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff59da8a50 a2=28 a3=0 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff59da8800 a2=50 a3=1 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.529000 audit: BPF prog-id=150 op=LOAD Jul 14 23:12:46.529000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff59da8800 a2=94 a3=5 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.530000 audit: BPF prog-id=150 op=UNLOAD Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff59da88b0 a2=50 a3=1 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff59da89d0 a2=4 a3=38 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { confidentiality } for pid=3648 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:12:46.530000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff59da8a20 a2=94 a3=6 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { confidentiality } for pid=3648 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:12:46.530000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff59da81d0 a2=94 a3=88 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.530000 audit[3648]: AVC avc: denied { confidentiality } for pid=3648 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:12:46.530000 audit[3648]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff59da81d0 a2=94 a3=88 items=0 ppid=3486 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { bpf } for pid=3652 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { bpf } for pid=3652 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { bpf } for pid=3652 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { bpf } for pid=3652 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit: BPF prog-id=151 op=LOAD Jul 14 23:12:46.589000 audit[3652]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffef1410f10 a2=98 a3=1999999999999999 items=0 ppid=3486 pid=3652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.589000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 23:12:46.589000 audit: BPF prog-id=151 op=UNLOAD Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { bpf } for pid=3652 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { bpf } for pid=3652 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { bpf } for pid=3652 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit[3652]: AVC avc: denied { bpf } for pid=3652 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.589000 audit: BPF prog-id=152 op=LOAD Jul 14 23:12:46.589000 audit[3652]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffef1410df0 a2=94 a3=ffff items=0 ppid=3486 pid=3652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.589000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 23:12:46.590000 audit: BPF prog-id=152 op=UNLOAD Jul 14 23:12:46.590000 audit[3652]: AVC avc: denied { bpf } for pid=3652 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.590000 audit[3652]: AVC avc: denied { bpf } for pid=3652 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.590000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.590000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.590000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.590000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.590000 audit[3652]: AVC avc: denied { perfmon } for pid=3652 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.590000 audit[3652]: AVC avc: denied { bpf } for pid=3652 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.590000 audit[3652]: AVC avc: denied { bpf } for pid=3652 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.590000 audit: BPF prog-id=153 op=LOAD Jul 14 23:12:46.590000 audit[3652]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffef1410e30 a2=94 a3=7ffef1411010 items=0 ppid=3486 pid=3652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.590000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 23:12:46.590000 audit: BPF prog-id=153 op=UNLOAD Jul 14 23:12:46.683842 systemd-networkd[1061]: vxlan.calico: Link UP Jul 14 23:12:46.683847 systemd-networkd[1061]: vxlan.calico: Gained carrier Jul 14 23:12:46.713000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.713000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.713000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.713000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.713000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.713000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.713000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.713000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.713000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.713000 audit: BPF prog-id=154 op=LOAD Jul 14 23:12:46.713000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffb0d82530 a2=98 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.713000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.713000 audit: BPF prog-id=154 op=UNLOAD Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit: BPF prog-id=155 op=LOAD Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffb0d82340 a2=94 a3=54428f items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit: BPF prog-id=155 op=UNLOAD Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit: BPF prog-id=156 op=LOAD Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffb0d82370 a2=94 a3=2 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit: BPF prog-id=156 op=UNLOAD Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffb0d82240 a2=28 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb0d82270 a2=28 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb0d82180 a2=28 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffb0d82290 a2=28 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffb0d82270 a2=28 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffb0d82260 a2=28 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffb0d82290 a2=28 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb0d82270 a2=28 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb0d82290 a2=28 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb0d82260 a2=28 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffb0d822d0 a2=28 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.719000 audit: BPF prog-id=157 op=LOAD Jul 14 23:12:46.719000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffb0d82140 a2=94 a3=0 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.719000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.719000 audit: BPF prog-id=157 op=UNLOAD Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fffb0d82130 a2=50 a3=2800 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.720000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fffb0d82130 a2=50 a3=2800 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.720000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit: BPF prog-id=158 op=LOAD Jul 14 23:12:46.720000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffb0d81950 a2=94 a3=2 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.720000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.720000 audit: BPF prog-id=158 op=UNLOAD Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { perfmon } for pid=3677 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit[3677]: AVC avc: denied { bpf } for pid=3677 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.720000 audit: BPF prog-id=159 op=LOAD Jul 14 23:12:46.720000 audit[3677]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffb0d81a50 a2=94 a3=30 items=0 ppid=3486 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.720000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit: BPF prog-id=160 op=LOAD Jul 14 23:12:46.724000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffa39edfd0 a2=98 a3=0 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.724000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.724000 audit: BPF prog-id=160 op=UNLOAD Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit: BPF prog-id=161 op=LOAD Jul 14 23:12:46.724000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffa39eddc0 a2=94 a3=54428f items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.724000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.724000 audit: BPF prog-id=161 op=UNLOAD Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.724000 audit: BPF prog-id=162 op=LOAD Jul 14 23:12:46.724000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffa39eddf0 a2=94 a3=2 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.724000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.724000 audit: BPF prog-id=162 op=UNLOAD Jul 14 23:12:46.825467 env[1247]: time="2025-07-14T23:12:46.825405726Z" level=info msg="StopPodSandbox for \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\"" Jul 14 23:12:46.825686 env[1247]: time="2025-07-14T23:12:46.825636779Z" level=info msg="StopPodSandbox for \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\"" Jul 14 23:12:46.830131 env[1247]: time="2025-07-14T23:12:46.829263172Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6c465469ff-fwz6k,Uid:e033abb8-71f7-437b-b442-6cb6283facda,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:46.830386 env[1247]: time="2025-07-14T23:12:46.830359847Z" level=info msg="StopPodSandbox for \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\"" Jul 14 23:12:46.855983 kubelet[2110]: I0714 23:12:46.851233 2110 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="8c1a0e12-92f0-4ce7-8d7e-8e3385289a82" path="/var/lib/kubelet/pods/8c1a0e12-92f0-4ce7-8d7e-8e3385289a82/volumes" Jul 14 23:12:46.868000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.868000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.868000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.868000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.868000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.868000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.868000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.868000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.868000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.868000 audit: BPF prog-id=163 op=LOAD Jul 14 23:12:46.868000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffa39edcb0 a2=94 a3=1 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.868000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.868000 audit: BPF prog-id=163 op=UNLOAD Jul 14 23:12:46.868000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.868000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fffa39edd80 a2=50 a3=7fffa39ede60 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.868000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.877000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.877000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffa39edcc0 a2=28 a3=0 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.877000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffa39edcf0 a2=28 a3=0 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffa39edc00 a2=28 a3=0 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffa39edd10 a2=28 a3=0 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffa39edcf0 a2=28 a3=0 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffa39edce0 a2=28 a3=0 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffa39edd10 a2=28 a3=0 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffa39edcf0 a2=28 a3=0 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffa39edd10 a2=28 a3=0 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffa39edce0 a2=28 a3=0 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffa39edd50 a2=28 a3=0 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffa39edb00 a2=50 a3=1 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit: BPF prog-id=164 op=LOAD Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffa39edb00 a2=94 a3=5 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit: BPF prog-id=164 op=UNLOAD Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffa39edbb0 a2=50 a3=1 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fffa39edcd0 a2=4 a3=38 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { confidentiality } for pid=3690 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffa39edd20 a2=94 a3=6 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.878000 audit[3690]: AVC avc: denied { confidentiality } for pid=3690 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:12:46.878000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffa39ed4d0 a2=94 a3=88 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { perfmon } for pid=3690 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { confidentiality } for pid=3690 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:12:46.879000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffa39ed4d0 a2=94 a3=88 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.879000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffa39eef00 a2=10 a3=f8f00800 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.879000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffa39eeda0 a2=10 a3=3 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.879000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffa39eed40 a2=10 a3=3 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.879000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.879000 audit[3690]: AVC avc: denied { bpf } for pid=3690 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.879000 audit[3690]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffa39eed40 a2=10 a3=7 items=0 ppid=3486 pid=3690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.879000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:46.903000 audit: BPF prog-id=159 op=UNLOAD Jul 14 23:12:47.077000 audit[3793]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3793 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.077000 audit[3793]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffdcfcc9b90 a2=0 a3=7ffdcfcc9b7c items=0 ppid=3486 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.077000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.085000 audit[3794]: NETFILTER_CFG table=raw:102 family=2 entries=21 op=nft_register_chain pid=3794 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.085000 audit[3794]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffd9f739820 a2=0 a3=7ffd9f73980c items=0 ppid=3486 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.085000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.110768 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali87b64c7d1ae: link becomes ready Jul 14 23:12:47.114000 audit[3801]: NETFILTER_CFG table=nat:103 family=2 entries=15 op=nft_register_chain pid=3801 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.114000 audit[3801]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffcbb099750 a2=0 a3=7ffcbb09973c items=0 ppid=3486 pid=3801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.114000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.116265 systemd-networkd[1061]: cali87b64c7d1ae: Link UP Jul 14 23:12:47.116409 systemd-networkd[1061]: cali87b64c7d1ae: Gained carrier Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:46.983 [INFO][3722] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--6c465469ff--fwz6k-eth0 whisker-6c465469ff- calico-system e033abb8-71f7-437b-b442-6cb6283facda 960 0 2025-07-14 23:12:46 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:6c465469ff projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-6c465469ff-fwz6k eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali87b64c7d1ae [] [] }} ContainerID="d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" Namespace="calico-system" Pod="whisker-6c465469ff-fwz6k" WorkloadEndpoint="localhost-k8s-whisker--6c465469ff--fwz6k-" Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:46.984 [INFO][3722] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" Namespace="calico-system" Pod="whisker-6c465469ff-fwz6k" WorkloadEndpoint="localhost-k8s-whisker--6c465469ff--fwz6k-eth0" Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.051 [INFO][3766] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" HandleID="k8s-pod-network.d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" Workload="localhost-k8s-whisker--6c465469ff--fwz6k-eth0" Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.051 [INFO][3766] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" HandleID="k8s-pod-network.d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" Workload="localhost-k8s-whisker--6c465469ff--fwz6k-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-6c465469ff-fwz6k", "timestamp":"2025-07-14 23:12:47.051051419 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.051 [INFO][3766] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.051 [INFO][3766] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.051 [INFO][3766] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.055 [INFO][3766] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" host="localhost" Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.068 [INFO][3766] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.075 [INFO][3766] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.077 [INFO][3766] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.080 [INFO][3766] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.081 [INFO][3766] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" host="localhost" Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.085 [INFO][3766] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993 Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.096 [INFO][3766] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" host="localhost" Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.100 [INFO][3766] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" host="localhost" Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.100 [INFO][3766] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" host="localhost" Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.100 [INFO][3766] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:47.131809 env[1247]: 2025-07-14 23:12:47.100 [INFO][3766] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" HandleID="k8s-pod-network.d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" Workload="localhost-k8s-whisker--6c465469ff--fwz6k-eth0" Jul 14 23:12:47.138068 env[1247]: 2025-07-14 23:12:47.102 [INFO][3722] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" Namespace="calico-system" Pod="whisker-6c465469ff-fwz6k" WorkloadEndpoint="localhost-k8s-whisker--6c465469ff--fwz6k-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--6c465469ff--fwz6k-eth0", GenerateName:"whisker-6c465469ff-", Namespace:"calico-system", SelfLink:"", UID:"e033abb8-71f7-437b-b442-6cb6283facda", ResourceVersion:"960", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6c465469ff", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-6c465469ff-fwz6k", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali87b64c7d1ae", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:47.138068 env[1247]: 2025-07-14 23:12:47.103 [INFO][3722] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" Namespace="calico-system" Pod="whisker-6c465469ff-fwz6k" WorkloadEndpoint="localhost-k8s-whisker--6c465469ff--fwz6k-eth0" Jul 14 23:12:47.138068 env[1247]: 2025-07-14 23:12:47.103 [INFO][3722] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali87b64c7d1ae ContainerID="d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" Namespace="calico-system" Pod="whisker-6c465469ff-fwz6k" WorkloadEndpoint="localhost-k8s-whisker--6c465469ff--fwz6k-eth0" Jul 14 23:12:47.138068 env[1247]: 2025-07-14 23:12:47.110 [INFO][3722] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" Namespace="calico-system" Pod="whisker-6c465469ff-fwz6k" WorkloadEndpoint="localhost-k8s-whisker--6c465469ff--fwz6k-eth0" Jul 14 23:12:47.138068 env[1247]: 2025-07-14 23:12:47.110 [INFO][3722] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" Namespace="calico-system" Pod="whisker-6c465469ff-fwz6k" WorkloadEndpoint="localhost-k8s-whisker--6c465469ff--fwz6k-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--6c465469ff--fwz6k-eth0", GenerateName:"whisker-6c465469ff-", Namespace:"calico-system", SelfLink:"", UID:"e033abb8-71f7-437b-b442-6cb6283facda", ResourceVersion:"960", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6c465469ff", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993", Pod:"whisker-6c465469ff-fwz6k", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali87b64c7d1ae", MAC:"ea:31:b5:eb:74:a1", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:47.138068 env[1247]: 2025-07-14 23:12:47.125 [INFO][3722] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993" Namespace="calico-system" Pod="whisker-6c465469ff-fwz6k" WorkloadEndpoint="localhost-k8s-whisker--6c465469ff--fwz6k-eth0" Jul 14 23:12:47.138068 env[1247]: 2025-07-14 23:12:46.993 [INFO][3717] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:12:47.138068 env[1247]: 2025-07-14 23:12:46.993 [INFO][3717] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" iface="eth0" netns="/var/run/netns/cni-a54ffff4-7c43-beb2-3bb3-caa8502ab833" Jul 14 23:12:47.138068 env[1247]: 2025-07-14 23:12:46.994 [INFO][3717] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" iface="eth0" netns="/var/run/netns/cni-a54ffff4-7c43-beb2-3bb3-caa8502ab833" Jul 14 23:12:47.138068 env[1247]: 2025-07-14 23:12:46.994 [INFO][3717] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" iface="eth0" netns="/var/run/netns/cni-a54ffff4-7c43-beb2-3bb3-caa8502ab833" Jul 14 23:12:47.138068 env[1247]: 2025-07-14 23:12:46.994 [INFO][3717] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:12:47.138068 env[1247]: 2025-07-14 23:12:46.994 [INFO][3717] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:12:47.138453 env[1247]: 2025-07-14 23:12:47.060 [INFO][3765] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" HandleID="k8s-pod-network.e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Workload="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:12:47.138453 env[1247]: 2025-07-14 23:12:47.060 [INFO][3765] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:47.138453 env[1247]: 2025-07-14 23:12:47.100 [INFO][3765] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:47.138453 env[1247]: 2025-07-14 23:12:47.117 [WARNING][3765] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" HandleID="k8s-pod-network.e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Workload="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:12:47.138453 env[1247]: 2025-07-14 23:12:47.117 [INFO][3765] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" HandleID="k8s-pod-network.e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Workload="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:12:47.138453 env[1247]: 2025-07-14 23:12:47.129 [INFO][3765] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:47.138453 env[1247]: 2025-07-14 23:12:47.130 [INFO][3717] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:12:47.138453 env[1247]: time="2025-07-14T23:12:47.134504824Z" level=info msg="TearDown network for sandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\" successfully" Jul 14 23:12:47.138453 env[1247]: time="2025-07-14T23:12:47.134530282Z" level=info msg="StopPodSandbox for \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\" returns successfully" Jul 14 23:12:47.117000 audit[3803]: NETFILTER_CFG table=filter:104 family=2 entries=81 op=nft_register_chain pid=3803 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.117000 audit[3803]: SYSCALL arch=c000003e syscall=46 success=yes exit=44276 a0=3 a1=7fffc50afce0 a2=0 a3=7fffc50afccc items=0 ppid=3486 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.117000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:46.998 [INFO][3715] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:46.998 [INFO][3715] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" iface="eth0" netns="/var/run/netns/cni-3020e426-70b0-c38a-98a2-fde9a9a26047" Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:46.999 [INFO][3715] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" iface="eth0" netns="/var/run/netns/cni-3020e426-70b0-c38a-98a2-fde9a9a26047" Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:47.002 [INFO][3715] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" iface="eth0" netns="/var/run/netns/cni-3020e426-70b0-c38a-98a2-fde9a9a26047" Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:47.002 [INFO][3715] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:47.002 [INFO][3715] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:47.067 [INFO][3771] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" HandleID="k8s-pod-network.92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Workload="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:47.067 [INFO][3771] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:47.129 [INFO][3771] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:47.136 [WARNING][3771] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" HandleID="k8s-pod-network.92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Workload="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:47.136 [INFO][3771] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" HandleID="k8s-pod-network.92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Workload="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:47.138 [INFO][3771] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:47.145357 env[1247]: 2025-07-14 23:12:47.142 [INFO][3715] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:12:47.150362 env[1247]: time="2025-07-14T23:12:47.145494907Z" level=info msg="TearDown network for sandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\" successfully" Jul 14 23:12:47.150362 env[1247]: time="2025-07-14T23:12:47.145511497Z" level=info msg="StopPodSandbox for \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\" returns successfully" Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.016 [INFO][3733] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.017 [INFO][3733] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" iface="eth0" netns="/var/run/netns/cni-62a070a5-592e-b422-fcac-bdb512e63b99" Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.017 [INFO][3733] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" iface="eth0" netns="/var/run/netns/cni-62a070a5-592e-b422-fcac-bdb512e63b99" Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.017 [INFO][3733] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" iface="eth0" netns="/var/run/netns/cni-62a070a5-592e-b422-fcac-bdb512e63b99" Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.017 [INFO][3733] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.017 [INFO][3733] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.103 [INFO][3787] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" HandleID="k8s-pod-network.92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Workload="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.103 [INFO][3787] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.139 [INFO][3787] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.145 [WARNING][3787] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" HandleID="k8s-pod-network.92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Workload="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.145 [INFO][3787] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" HandleID="k8s-pod-network.92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Workload="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.147 [INFO][3787] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:47.154816 env[1247]: 2025-07-14 23:12:47.149 [INFO][3733] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:12:47.156242 env[1247]: time="2025-07-14T23:12:47.155597915Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:47.156242 env[1247]: time="2025-07-14T23:12:47.155639593Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:47.156242 env[1247]: time="2025-07-14T23:12:47.155647620Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:47.156242 env[1247]: time="2025-07-14T23:12:47.155879700Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993 pid=3828 runtime=io.containerd.runc.v2 Jul 14 23:12:47.156501 env[1247]: time="2025-07-14T23:12:47.156416214Z" level=info msg="TearDown network for sandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\" successfully" Jul 14 23:12:47.156501 env[1247]: time="2025-07-14T23:12:47.156441945Z" level=info msg="StopPodSandbox for \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\" returns successfully" Jul 14 23:12:47.173725 systemd[1]: Started cri-containerd-d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993.scope. Jul 14 23:12:47.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.184000 audit: BPF prog-id=165 op=LOAD Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3828 pid=3840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434623731376330333663396137643032396139666236653963373238 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3828 pid=3840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434623731376330333663396137643032396139666236653963373238 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit: BPF prog-id=166 op=LOAD Jul 14 23:12:47.185000 audit[3840]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003cc100 items=0 ppid=3828 pid=3840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434623731376330333663396137643032396139666236653963373238 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.185000 audit: BPF prog-id=167 op=LOAD Jul 14 23:12:47.185000 audit[3840]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003cc148 items=0 ppid=3828 pid=3840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434623731376330333663396137643032396139666236653963373238 Jul 14 23:12:47.187000 audit: BPF prog-id=167 op=UNLOAD Jul 14 23:12:47.187000 audit: BPF prog-id=166 op=UNLOAD Jul 14 23:12:47.187000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.187000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.187000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.187000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.187000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.187000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.187000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.187000 audit[3840]: AVC avc: denied { perfmon } for pid=3840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.187000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.187000 audit[3840]: AVC avc: denied { bpf } for pid=3840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.187000 audit: BPF prog-id=168 op=LOAD Jul 14 23:12:47.187000 audit[3840]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003cc558 items=0 ppid=3828 pid=3840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434623731376330333663396137643032396139666236653963373238 Jul 14 23:12:47.189146 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:47.190000 audit[3860]: NETFILTER_CFG table=filter:105 family=2 entries=63 op=nft_register_chain pid=3860 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.190000 audit[3860]: SYSCALL arch=c000003e syscall=46 success=yes exit=37048 a0=3 a1=7ffe840a16c0 a2=0 a3=7ffe840a16ac items=0 ppid=3486 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.190000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.212187 env[1247]: time="2025-07-14T23:12:47.212156674Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6c465469ff-fwz6k,Uid:e033abb8-71f7-437b-b442-6cb6283facda,Namespace:calico-system,Attempt:0,} returns sandbox id \"d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993\"" Jul 14 23:12:47.249668 env[1247]: time="2025-07-14T23:12:47.249630629Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-kzc7l,Uid:e7202260-029d-49c9-8ec8-f068238e9e8b,Namespace:kube-system,Attempt:1,}" Jul 14 23:12:47.249948 env[1247]: time="2025-07-14T23:12:47.249916849Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6dfbf78cff-fbjqb,Uid:35477ad0-0bd5-4d19-a21c-4649c1795360,Namespace:calico-system,Attempt:1,}" Jul 14 23:12:47.256286 env[1247]: time="2025-07-14T23:12:47.256264297Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-2z774,Uid:90c22131-18df-4c3c-beb0-cd3387b6f0f1,Namespace:kube-system,Attempt:1,}" Jul 14 23:12:47.280871 systemd-networkd[1061]: caliaedfff3e95c: Gained IPv6LL Jul 14 23:12:47.387922 systemd[1]: run-netns-cni\x2da54ffff4\x2d7c43\x2dbeb2\x2d3bb3\x2dcaa8502ab833.mount: Deactivated successfully. Jul 14 23:12:47.387981 systemd[1]: run-netns-cni\x2d62a070a5\x2d592e\x2db422\x2dfcac\x2dbdb512e63b99.mount: Deactivated successfully. Jul 14 23:12:47.388015 systemd[1]: run-netns-cni\x2d3020e426\x2d70b0\x2dc38a\x2d98a2\x2dfde9a9a26047.mount: Deactivated successfully. Jul 14 23:12:47.405781 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calide6b61bbbf7: link becomes ready Jul 14 23:12:47.406149 systemd-networkd[1061]: calide6b61bbbf7: Link UP Jul 14 23:12:47.406264 systemd-networkd[1061]: calide6b61bbbf7: Gained carrier Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.335 [INFO][3872] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0 calico-kube-controllers-6dfbf78cff- calico-system 35477ad0-0bd5-4d19-a21c-4649c1795360 968 0 2025-07-14 23:12:15 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6dfbf78cff projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-6dfbf78cff-fbjqb eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calide6b61bbbf7 [] [] }} ContainerID="b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" Namespace="calico-system" Pod="calico-kube-controllers-6dfbf78cff-fbjqb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-" Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.335 [INFO][3872] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" Namespace="calico-system" Pod="calico-kube-controllers-6dfbf78cff-fbjqb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.363 [INFO][3907] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" HandleID="k8s-pod-network.b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" Workload="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.363 [INFO][3907] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" HandleID="k8s-pod-network.b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" Workload="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd020), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-6dfbf78cff-fbjqb", "timestamp":"2025-07-14 23:12:47.363126832 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.363 [INFO][3907] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.363 [INFO][3907] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.363 [INFO][3907] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.368 [INFO][3907] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" host="localhost" Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.371 [INFO][3907] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.374 [INFO][3907] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.375 [INFO][3907] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.377 [INFO][3907] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.377 [INFO][3907] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" host="localhost" Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.378 [INFO][3907] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.391 [INFO][3907] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" host="localhost" Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.396 [INFO][3907] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" host="localhost" Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.396 [INFO][3907] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" host="localhost" Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.396 [INFO][3907] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:47.420027 env[1247]: 2025-07-14 23:12:47.396 [INFO][3907] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" HandleID="k8s-pod-network.b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" Workload="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:12:47.420582 env[1247]: 2025-07-14 23:12:47.402 [INFO][3872] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" Namespace="calico-system" Pod="calico-kube-controllers-6dfbf78cff-fbjqb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0", GenerateName:"calico-kube-controllers-6dfbf78cff-", Namespace:"calico-system", SelfLink:"", UID:"35477ad0-0bd5-4d19-a21c-4649c1795360", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6dfbf78cff", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-6dfbf78cff-fbjqb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calide6b61bbbf7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:47.420582 env[1247]: 2025-07-14 23:12:47.402 [INFO][3872] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" Namespace="calico-system" Pod="calico-kube-controllers-6dfbf78cff-fbjqb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:12:47.420582 env[1247]: 2025-07-14 23:12:47.402 [INFO][3872] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calide6b61bbbf7 ContainerID="b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" Namespace="calico-system" Pod="calico-kube-controllers-6dfbf78cff-fbjqb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:12:47.420582 env[1247]: 2025-07-14 23:12:47.405 [INFO][3872] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" Namespace="calico-system" Pod="calico-kube-controllers-6dfbf78cff-fbjqb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:12:47.420582 env[1247]: 2025-07-14 23:12:47.407 [INFO][3872] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" Namespace="calico-system" Pod="calico-kube-controllers-6dfbf78cff-fbjqb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0", GenerateName:"calico-kube-controllers-6dfbf78cff-", Namespace:"calico-system", SelfLink:"", UID:"35477ad0-0bd5-4d19-a21c-4649c1795360", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6dfbf78cff", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d", Pod:"calico-kube-controllers-6dfbf78cff-fbjqb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calide6b61bbbf7", MAC:"be:84:7a:97:c5:e9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:47.420582 env[1247]: 2025-07-14 23:12:47.418 [INFO][3872] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d" Namespace="calico-system" Pod="calico-kube-controllers-6dfbf78cff-fbjqb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:12:47.434332 env[1247]: time="2025-07-14T23:12:47.434197883Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:47.434332 env[1247]: time="2025-07-14T23:12:47.434223058Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:47.434332 env[1247]: time="2025-07-14T23:12:47.434232533Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:47.434487 env[1247]: time="2025-07-14T23:12:47.434342448Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d pid=3935 runtime=io.containerd.runc.v2 Jul 14 23:12:47.446777 systemd[1]: Started cri-containerd-b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d.scope. Jul 14 23:12:47.464139 kernel: kauditd_printk_skb: 707 callbacks suppressed Jul 14 23:12:47.464222 kernel: audit: type=1400 audit(1752534767.460:1167): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.464243 kernel: audit: type=1400 audit(1752534767.460:1168): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.469840 kernel: audit: type=1400 audit(1752534767.460:1169): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.473584 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:47.473922 kernel: audit: type=1400 audit(1752534767.460:1170): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.484893 kernel: audit: type=1400 audit(1752534767.460:1171): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.484938 kernel: audit: type=1400 audit(1752534767.460:1172): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.484954 kernel: audit: type=1400 audit(1752534767.460:1173): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.490766 kernel: audit: type=1400 audit(1752534767.460:1174): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.498223 kernel: audit: type=1400 audit(1752534767.460:1175): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.498282 kernel: audit: type=1400 audit(1752534767.463:1176): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.463000 audit: BPF prog-id=169 op=LOAD Jul 14 23:12:47.465000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.465000 audit[3944]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3935 pid=3944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230616463313264393334613636313163373762656461616239363837 Jul 14 23:12:47.465000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.465000 audit[3944]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3935 pid=3944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230616463313264393334613636313163373762656461616239363837 Jul 14 23:12:47.465000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.465000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.465000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.465000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.465000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.465000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.465000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.465000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.465000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.465000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.465000 audit: BPF prog-id=170 op=LOAD Jul 14 23:12:47.465000 audit[3944]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001e3a30 items=0 ppid=3935 pid=3944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230616463313264393334613636313163373762656461616239363837 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit: BPF prog-id=171 op=LOAD Jul 14 23:12:47.466000 audit[3944]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001e3a78 items=0 ppid=3935 pid=3944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230616463313264393334613636313163373762656461616239363837 Jul 14 23:12:47.466000 audit: BPF prog-id=171 op=UNLOAD Jul 14 23:12:47.466000 audit: BPF prog-id=170 op=UNLOAD Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { perfmon } for pid=3944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit[3944]: AVC avc: denied { bpf } for pid=3944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.466000 audit: BPF prog-id=172 op=LOAD Jul 14 23:12:47.466000 audit[3944]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001e3e88 items=0 ppid=3935 pid=3944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230616463313264393334613636313163373762656461616239363837 Jul 14 23:12:47.499000 audit[3965]: NETFILTER_CFG table=filter:106 family=2 entries=40 op=nft_register_chain pid=3965 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.499000 audit[3965]: SYSCALL arch=c000003e syscall=46 success=yes exit=20764 a0=3 a1=7ffd1e434850 a2=0 a3=7ffd1e43483c items=0 ppid=3486 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.499000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.524164 systemd-networkd[1061]: cali2504f237612: Link UP Jul 14 23:12:47.525499 systemd-networkd[1061]: cali2504f237612: Gained carrier Jul 14 23:12:47.525775 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2504f237612: link becomes ready Jul 14 23:12:47.527712 env[1247]: time="2025-07-14T23:12:47.527690980Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6dfbf78cff-fbjqb,Uid:35477ad0-0bd5-4d19-a21c-4649c1795360,Namespace:calico-system,Attempt:1,} returns sandbox id \"b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d\"" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.332 [INFO][3866] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0 coredns-674b8bbfcf- kube-system e7202260-029d-49c9-8ec8-f068238e9e8b 967 0 2025-07-14 23:12:03 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-kzc7l eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali2504f237612 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" Namespace="kube-system" Pod="coredns-674b8bbfcf-kzc7l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kzc7l-" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.332 [INFO][3866] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" Namespace="kube-system" Pod="coredns-674b8bbfcf-kzc7l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.375 [INFO][3902] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" HandleID="k8s-pod-network.81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" Workload="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.375 [INFO][3902] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" HandleID="k8s-pod-network.81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" Workload="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-kzc7l", "timestamp":"2025-07-14 23:12:47.37522612 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.375 [INFO][3902] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.397 [INFO][3902] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.397 [INFO][3902] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.473 [INFO][3902] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" host="localhost" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.484 [INFO][3902] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.490 [INFO][3902] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.492 [INFO][3902] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.499 [INFO][3902] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.499 [INFO][3902] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" host="localhost" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.502 [INFO][3902] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.506 [INFO][3902] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" host="localhost" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.510 [INFO][3902] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" host="localhost" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.510 [INFO][3902] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" host="localhost" Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.511 [INFO][3902] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:47.568900 env[1247]: 2025-07-14 23:12:47.511 [INFO][3902] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" HandleID="k8s-pod-network.81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" Workload="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:12:47.569477 env[1247]: 2025-07-14 23:12:47.512 [INFO][3866] cni-plugin/k8s.go 418: Populated endpoint ContainerID="81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" Namespace="kube-system" Pod="coredns-674b8bbfcf-kzc7l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"e7202260-029d-49c9-8ec8-f068238e9e8b", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-kzc7l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2504f237612", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:47.569477 env[1247]: 2025-07-14 23:12:47.512 [INFO][3866] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" Namespace="kube-system" Pod="coredns-674b8bbfcf-kzc7l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:12:47.569477 env[1247]: 2025-07-14 23:12:47.512 [INFO][3866] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2504f237612 ContainerID="81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" Namespace="kube-system" Pod="coredns-674b8bbfcf-kzc7l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:12:47.569477 env[1247]: 2025-07-14 23:12:47.525 [INFO][3866] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" Namespace="kube-system" Pod="coredns-674b8bbfcf-kzc7l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:12:47.569477 env[1247]: 2025-07-14 23:12:47.528 [INFO][3866] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" Namespace="kube-system" Pod="coredns-674b8bbfcf-kzc7l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"e7202260-029d-49c9-8ec8-f068238e9e8b", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f", Pod:"coredns-674b8bbfcf-kzc7l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2504f237612", MAC:"ae:5b:10:97:00:95", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:47.569477 env[1247]: 2025-07-14 23:12:47.564 [INFO][3866] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f" Namespace="kube-system" Pod="coredns-674b8bbfcf-kzc7l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:12:47.584783 env[1247]: time="2025-07-14T23:12:47.584522138Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:47.584783 env[1247]: time="2025-07-14T23:12:47.584560812Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:47.584783 env[1247]: time="2025-07-14T23:12:47.584568431Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:47.584783 env[1247]: time="2025-07-14T23:12:47.584659359Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f pid=3985 runtime=io.containerd.runc.v2 Jul 14 23:12:47.600156 systemd[1]: Started cri-containerd-81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f.scope. Jul 14 23:12:47.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit: BPF prog-id=173 op=LOAD Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3985 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831633939366536393132646235613332396238643439393436653664 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3985 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831633939366536393132646235613332396238643439393436653664 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit: BPF prog-id=174 op=LOAD Jul 14 23:12:47.629000 audit[3993]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000273fe0 items=0 ppid=3985 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831633939366536393132646235613332396238643439393436653664 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit: BPF prog-id=175 op=LOAD Jul 14 23:12:47.629000 audit[3993]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003f0028 items=0 ppid=3985 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831633939366536393132646235613332396238643439393436653664 Jul 14 23:12:47.629000 audit: BPF prog-id=175 op=UNLOAD Jul 14 23:12:47.629000 audit: BPF prog-id=174 op=UNLOAD Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { perfmon } for pid=3993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit[3993]: AVC avc: denied { bpf } for pid=3993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.629000 audit: BPF prog-id=176 op=LOAD Jul 14 23:12:47.629000 audit[3993]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003f0438 items=0 ppid=3985 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831633939366536393132646235613332396238643439393436653664 Jul 14 23:12:47.643161 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:47.678765 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali02ef2e2549a: link becomes ready Jul 14 23:12:47.678578 systemd-networkd[1061]: cali02ef2e2549a: Link UP Jul 14 23:12:47.678680 systemd-networkd[1061]: cali02ef2e2549a: Gained carrier Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.330 [INFO][3882] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--2z774-eth0 coredns-674b8bbfcf- kube-system 90c22131-18df-4c3c-beb0-cd3387b6f0f1 969 0 2025-07-14 23:12:03 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-2z774 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali02ef2e2549a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" Namespace="kube-system" Pod="coredns-674b8bbfcf-2z774" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2z774-" Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.338 [INFO][3882] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" Namespace="kube-system" Pod="coredns-674b8bbfcf-2z774" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.428 [INFO][3913] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" HandleID="k8s-pod-network.dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" Workload="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.428 [INFO][3913] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" HandleID="k8s-pod-network.dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" Workload="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000302110), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-2z774", "timestamp":"2025-07-14 23:12:47.428025058 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.428 [INFO][3913] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.510 [INFO][3913] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.510 [INFO][3913] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.573 [INFO][3913] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" host="localhost" Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.614 [INFO][3913] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.620 [INFO][3913] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.621 [INFO][3913] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.625 [INFO][3913] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.625 [INFO][3913] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" host="localhost" Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.634 [INFO][3913] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34 Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.660 [INFO][3913] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" host="localhost" Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.671 [INFO][3913] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" host="localhost" Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.671 [INFO][3913] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" host="localhost" Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.671 [INFO][3913] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:47.707614 env[1247]: 2025-07-14 23:12:47.671 [INFO][3913] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" HandleID="k8s-pod-network.dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" Workload="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:12:47.709305 env[1247]: 2025-07-14 23:12:47.673 [INFO][3882] cni-plugin/k8s.go 418: Populated endpoint ContainerID="dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" Namespace="kube-system" Pod="coredns-674b8bbfcf-2z774" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--2z774-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"90c22131-18df-4c3c-beb0-cd3387b6f0f1", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-2z774", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali02ef2e2549a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:47.709305 env[1247]: 2025-07-14 23:12:47.673 [INFO][3882] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" Namespace="kube-system" Pod="coredns-674b8bbfcf-2z774" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:12:47.709305 env[1247]: 2025-07-14 23:12:47.673 [INFO][3882] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali02ef2e2549a ContainerID="dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" Namespace="kube-system" Pod="coredns-674b8bbfcf-2z774" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:12:47.709305 env[1247]: 2025-07-14 23:12:47.683 [INFO][3882] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" Namespace="kube-system" Pod="coredns-674b8bbfcf-2z774" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:12:47.709305 env[1247]: 2025-07-14 23:12:47.683 [INFO][3882] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" Namespace="kube-system" Pod="coredns-674b8bbfcf-2z774" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--2z774-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"90c22131-18df-4c3c-beb0-cd3387b6f0f1", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34", Pod:"coredns-674b8bbfcf-2z774", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali02ef2e2549a", MAC:"fa:f9:b5:4c:a9:40", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:47.709305 env[1247]: 2025-07-14 23:12:47.704 [INFO][3882] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34" Namespace="kube-system" Pod="coredns-674b8bbfcf-2z774" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:12:47.722237 env[1247]: time="2025-07-14T23:12:47.722192931Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-kzc7l,Uid:e7202260-029d-49c9-8ec8-f068238e9e8b,Namespace:kube-system,Attempt:1,} returns sandbox id \"81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f\"" Jul 14 23:12:47.732316 env[1247]: time="2025-07-14T23:12:47.732274710Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:47.732482 env[1247]: time="2025-07-14T23:12:47.732467390Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:47.732564 env[1247]: time="2025-07-14T23:12:47.732550281Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:47.732766 env[1247]: time="2025-07-14T23:12:47.732725493Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34 pid=4030 runtime=io.containerd.runc.v2 Jul 14 23:12:47.740000 audit[4048]: NETFILTER_CFG table=filter:107 family=2 entries=50 op=nft_register_chain pid=4048 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.740000 audit[4048]: SYSCALL arch=c000003e syscall=46 success=yes exit=24928 a0=3 a1=7ffcf7f3eac0 a2=0 a3=7ffcf7f3eaac items=0 ppid=3486 pid=4048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.740000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.744880 systemd[1]: Started cri-containerd-dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34.scope. Jul 14 23:12:47.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.757000 audit: BPF prog-id=177 op=LOAD Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4030 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464306465336435383130353433666333353335343935326332656562 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4030 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464306465336435383130353433666333353335343935326332656562 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit: BPF prog-id=178 op=LOAD Jul 14 23:12:47.758000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000227f30 items=0 ppid=4030 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464306465336435383130353433666333353335343935326332656562 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.758000 audit: BPF prog-id=179 op=LOAD Jul 14 23:12:47.758000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000227f78 items=0 ppid=4030 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464306465336435383130353433666333353335343935326332656562 Jul 14 23:12:47.759000 audit: BPF prog-id=179 op=UNLOAD Jul 14 23:12:47.759000 audit: BPF prog-id=178 op=UNLOAD Jul 14 23:12:47.759000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.759000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.759000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.759000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.759000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.759000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.759000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.759000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.759000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.759000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.759000 audit: BPF prog-id=180 op=LOAD Jul 14 23:12:47.759000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00038c388 items=0 ppid=4030 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464306465336435383130353433666333353335343935326332656562 Jul 14 23:12:47.761366 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:47.786177 env[1247]: time="2025-07-14T23:12:47.786153086Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-2z774,Uid:90c22131-18df-4c3c-beb0-cd3387b6f0f1,Namespace:kube-system,Attempt:1,} returns sandbox id \"dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34\"" Jul 14 23:12:47.828000 audit[4070]: NETFILTER_CFG table=filter:108 family=2 entries=44 op=nft_register_chain pid=4070 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.828000 audit[4070]: SYSCALL arch=c000003e syscall=46 success=yes exit=21532 a0=3 a1=7ffcc40ac8a0 a2=0 a3=7ffcc40ac88c items=0 ppid=3486 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.828000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.886225 env[1247]: time="2025-07-14T23:12:47.886199502Z" level=info msg="CreateContainer within sandbox \"dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 23:12:47.888563 env[1247]: time="2025-07-14T23:12:47.888531081Z" level=info msg="CreateContainer within sandbox \"81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 23:12:47.906691 env[1247]: time="2025-07-14T23:12:47.906617405Z" level=info msg="CreateContainer within sandbox \"dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"a5c2d7be13876569307e328c8b9c2f23222b28fa3a97326648c8f02a1049ac79\"" Jul 14 23:12:47.909838 env[1247]: time="2025-07-14T23:12:47.909584809Z" level=info msg="StartContainer for \"a5c2d7be13876569307e328c8b9c2f23222b28fa3a97326648c8f02a1049ac79\"" Jul 14 23:12:47.911025 env[1247]: time="2025-07-14T23:12:47.910534685Z" level=info msg="CreateContainer within sandbox \"81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"62570c45ddbda1934b678506f727dc1d0f0db8aa8ed17fe7d4b552d609c0ac30\"" Jul 14 23:12:47.918094 env[1247]: time="2025-07-14T23:12:47.918051285Z" level=info msg="StartContainer for \"62570c45ddbda1934b678506f727dc1d0f0db8aa8ed17fe7d4b552d609c0ac30\"" Jul 14 23:12:47.939850 systemd[1]: Started cri-containerd-62570c45ddbda1934b678506f727dc1d0f0db8aa8ed17fe7d4b552d609c0ac30.scope. Jul 14 23:12:47.945647 systemd[1]: Started cri-containerd-a5c2d7be13876569307e328c8b9c2f23222b28fa3a97326648c8f02a1049ac79.scope. Jul 14 23:12:47.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit: BPF prog-id=181 op=LOAD Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=3985 pid=4089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353730633435646462646131393334623637383530366637323764 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=3985 pid=4089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353730633435646462646131393334623637383530366637323764 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit: BPF prog-id=182 op=LOAD Jul 14 23:12:47.978000 audit[4089]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c00039ae90 items=0 ppid=3985 pid=4089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353730633435646462646131393334623637383530366637323764 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit: BPF prog-id=183 op=LOAD Jul 14 23:12:47.978000 audit[4089]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c00039aed8 items=0 ppid=3985 pid=4089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353730633435646462646131393334623637383530366637323764 Jul 14 23:12:47.978000 audit: BPF prog-id=183 op=UNLOAD Jul 14 23:12:47.978000 audit: BPF prog-id=182 op=UNLOAD Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { perfmon } for pid=4089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit[4089]: AVC avc: denied { bpf } for pid=4089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.978000 audit: BPF prog-id=184 op=LOAD Jul 14 23:12:47.978000 audit[4089]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c00039b2e8 items=0 ppid=3985 pid=4089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353730633435646462646131393334623637383530366637323764 Jul 14 23:12:47.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.982000 audit: BPF prog-id=185 op=LOAD Jul 14 23:12:47.989000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.989000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4030 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135633264376265313338373635363933303765333238633862396332 Jul 14 23:12:47.989000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.989000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4030 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135633264376265313338373635363933303765333238633862396332 Jul 14 23:12:47.989000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.989000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.989000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.989000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.989000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.989000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.989000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.989000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.989000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.989000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.989000 audit: BPF prog-id=186 op=LOAD Jul 14 23:12:47.989000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002a3940 items=0 ppid=4030 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135633264376265313338373635363933303765333238633862396332 Jul 14 23:12:47.990000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.990000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.990000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.990000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.990000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.990000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.990000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.990000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.990000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.990000 audit: BPF prog-id=187 op=LOAD Jul 14 23:12:47.990000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002a3988 items=0 ppid=4030 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135633264376265313338373635363933303765333238633862396332 Jul 14 23:12:47.990000 audit: BPF prog-id=187 op=UNLOAD Jul 14 23:12:47.991000 audit: BPF prog-id=186 op=UNLOAD Jul 14 23:12:47.991000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.991000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.991000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.991000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.991000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.991000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.991000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.991000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.991000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.991000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.991000 audit: BPF prog-id=188 op=LOAD Jul 14 23:12:47.991000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002a3d98 items=0 ppid=4030 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135633264376265313338373635363933303765333238633862396332 Jul 14 23:12:48.000578 env[1247]: time="2025-07-14T23:12:48.000543781Z" level=info msg="StartContainer for \"62570c45ddbda1934b678506f727dc1d0f0db8aa8ed17fe7d4b552d609c0ac30\" returns successfully" Jul 14 23:12:48.008737 env[1247]: time="2025-07-14T23:12:48.008703462Z" level=info msg="StartContainer for \"a5c2d7be13876569307e328c8b9c2f23222b28fa3a97326648c8f02a1049ac79\" returns successfully" Jul 14 23:12:48.432975 systemd-networkd[1061]: vxlan.calico: Gained IPv6LL Jul 14 23:12:48.496936 systemd-networkd[1061]: calide6b61bbbf7: Gained IPv6LL Jul 14 23:12:48.624997 systemd-networkd[1061]: cali87b64c7d1ae: Gained IPv6LL Jul 14 23:12:49.008906 systemd-networkd[1061]: cali02ef2e2549a: Gained IPv6LL Jul 14 23:12:49.456944 systemd-networkd[1061]: cali2504f237612: Gained IPv6LL Jul 14 23:12:50.211000 audit[4110]: AVC avc: denied { getattr } for pid=4110 comm="coredns" path="cgroup:[4026533082]" dev="nsfs" ino=4026533082 scontext=system_u:system_r:svirt_lxc_net_t:s0:c318,c387 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 23:12:50.211000 audit[4110]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000058438 a2=c0004d3a38 a3=0 items=0 ppid=3985 pid=4110 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c318,c387 key=(null) Jul 14 23:12:50.211000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 23:12:50.223000 audit[4117]: AVC avc: denied { getattr } for pid=4117 comm="coredns" path="cgroup:[4026533085]" dev="nsfs" ino=4026533085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c193,c921 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 23:12:50.223000 audit[4117]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a270 a2=c000120038 a3=0 items=0 ppid=4030 pid=4117 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c193,c921 key=(null) Jul 14 23:12:50.223000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 23:12:50.296679 env[1247]: time="2025-07-14T23:12:50.296645454Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:50.398091 env[1247]: time="2025-07-14T23:12:50.398042728Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:50.434075 env[1247]: time="2025-07-14T23:12:50.434048202Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:50.458395 env[1247]: time="2025-07-14T23:12:50.458363105Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:50.459009 env[1247]: time="2025-07-14T23:12:50.458993217Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 14 23:12:50.880181 env[1247]: time="2025-07-14T23:12:50.880151171Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 14 23:12:50.948593 env[1247]: time="2025-07-14T23:12:50.948559892Z" level=info msg="CreateContainer within sandbox \"b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 23:12:50.974330 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3953549973.mount: Deactivated successfully. Jul 14 23:12:50.979767 env[1247]: time="2025-07-14T23:12:50.979548206Z" level=info msg="CreateContainer within sandbox \"b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"a048e50949b785bb8d248cfb74ef6d83b4228046fa675d3328c3c2ecf9913e61\"" Jul 14 23:12:50.997234 env[1247]: time="2025-07-14T23:12:50.996678043Z" level=info msg="StartContainer for \"a048e50949b785bb8d248cfb74ef6d83b4228046fa675d3328c3c2ecf9913e61\"" Jul 14 23:12:51.038243 systemd[1]: Started cri-containerd-a048e50949b785bb8d248cfb74ef6d83b4228046fa675d3328c3c2ecf9913e61.scope. Jul 14 23:12:51.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.063000 audit: BPF prog-id=189 op=LOAD Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3576 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130343865353039343962373835626238643234386366623734656636 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=3576 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130343865353039343962373835626238643234386366623734656636 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit: BPF prog-id=190 op=LOAD Jul 14 23:12:51.064000 audit[4156]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000333e90 items=0 ppid=3576 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130343865353039343962373835626238643234386366623734656636 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit: BPF prog-id=191 op=LOAD Jul 14 23:12:51.064000 audit[4156]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000333ed8 items=0 ppid=3576 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130343865353039343962373835626238643234386366623734656636 Jul 14 23:12:51.064000 audit: BPF prog-id=191 op=UNLOAD Jul 14 23:12:51.064000 audit: BPF prog-id=190 op=UNLOAD Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { perfmon } for pid=4156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit[4156]: AVC avc: denied { bpf } for pid=4156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.064000 audit: BPF prog-id=192 op=LOAD Jul 14 23:12:51.064000 audit[4156]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00039a2e8 items=0 ppid=3576 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130343865353039343962373835626238643234386366623734656636 Jul 14 23:12:51.096089 env[1247]: time="2025-07-14T23:12:51.096057660Z" level=info msg="StartContainer for \"a048e50949b785bb8d248cfb74ef6d83b4228046fa675d3328c3c2ecf9913e61\" returns successfully" Jul 14 23:12:51.246907 kubelet[2110]: I0714 23:12:51.187530 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-2z774" podStartSLOduration=48.119641553 podStartE2EDuration="48.119641553s" podCreationTimestamp="2025-07-14 23:12:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:12:51.106097331 +0000 UTC m=+52.582703838" watchObservedRunningTime="2025-07-14 23:12:51.119641553 +0000 UTC m=+52.596248062" Jul 14 23:12:51.448000 audit[4183]: NETFILTER_CFG table=filter:109 family=2 entries=17 op=nft_register_rule pid=4183 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:51.448000 audit[4183]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd39d00d80 a2=0 a3=7ffd39d00d6c items=0 ppid=2217 pid=4183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.448000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:51.533000 audit[4183]: NETFILTER_CFG table=nat:110 family=2 entries=47 op=nft_register_chain pid=4183 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:51.533000 audit[4183]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffd39d00d80 a2=0 a3=7ffd39d00d6c items=0 ppid=2217 pid=4183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.533000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:51.573000 audit[4187]: NETFILTER_CFG table=filter:111 family=2 entries=14 op=nft_register_rule pid=4187 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:51.573000 audit[4187]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffec3a1d000 a2=0 a3=7ffec3a1cfec items=0 ppid=2217 pid=4187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.573000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:51.576000 audit[4187]: NETFILTER_CFG table=nat:112 family=2 entries=20 op=nft_register_rule pid=4187 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:51.576000 audit[4187]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffec3a1d000 a2=0 a3=7ffec3a1cfec items=0 ppid=2217 pid=4187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.576000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:51.972478 systemd[1]: run-containerd-runc-k8s.io-a048e50949b785bb8d248cfb74ef6d83b4228046fa675d3328c3c2ecf9913e61-runc.kCUQhp.mount: Deactivated successfully. Jul 14 23:12:52.051086 kubelet[2110]: I0714 23:12:52.051048 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-kzc7l" podStartSLOduration=49.051034295 podStartE2EDuration="49.051034295s" podCreationTimestamp="2025-07-14 23:12:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:12:51.292480769 +0000 UTC m=+52.769087279" watchObservedRunningTime="2025-07-14 23:12:52.051034295 +0000 UTC m=+53.527640799" Jul 14 23:12:52.532000 audit[4168]: AVC avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:12:52.537989 kernel: kauditd_printk_skb: 359 callbacks suppressed Jul 14 23:12:52.544190 kernel: audit: type=1400 audit(1752534772.532:1284): avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:12:52.544246 kernel: audit: type=1300 audit(1752534772.532:1284): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002882bc0 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:12:52.532000 audit[4168]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002882bc0 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:12:52.550517 kernel: audit: type=1327 audit(1752534772.532:1284): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:12:52.532000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:12:52.586000 audit[4201]: NETFILTER_CFG table=filter:113 family=2 entries=14 op=nft_register_rule pid=4201 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:52.593237 kernel: audit: type=1325 audit(1752534772.586:1285): table=filter:113 family=2 entries=14 op=nft_register_rule pid=4201 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:52.595375 kernel: audit: type=1300 audit(1752534772.586:1285): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc6b21e590 a2=0 a3=7ffc6b21e57c items=0 ppid=2217 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:52.596052 kernel: audit: type=1327 audit(1752534772.586:1285): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:52.586000 audit[4201]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc6b21e590 a2=0 a3=7ffc6b21e57c items=0 ppid=2217 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:52.586000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:52.595000 audit[4201]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=4201 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:52.602333 kernel: audit: type=1325 audit(1752534772.595:1286): table=nat:114 family=2 entries=20 op=nft_register_rule pid=4201 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:52.602375 kernel: audit: type=1300 audit(1752534772.595:1286): arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc6b21e590 a2=0 a3=7ffc6b21e57c items=0 ppid=2217 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:52.595000 audit[4201]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc6b21e590 a2=0 a3=7ffc6b21e57c items=0 ppid=2217 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:52.604391 kernel: audit: type=1327 audit(1752534772.595:1286): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:52.595000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:52.616976 env[1247]: time="2025-07-14T23:12:52.616508863Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:52.625005 env[1247]: time="2025-07-14T23:12:52.624953740Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:52.635229 env[1247]: time="2025-07-14T23:12:52.635178415Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:52.642864 env[1247]: time="2025-07-14T23:12:52.642846988Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:52.643116 env[1247]: time="2025-07-14T23:12:52.643097063Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 14 23:12:52.715283 env[1247]: time="2025-07-14T23:12:52.715078008Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 14 23:12:52.719337 env[1247]: time="2025-07-14T23:12:52.719228601Z" level=info msg="CreateContainer within sandbox \"d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 14 23:12:52.727702 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3099360400.mount: Deactivated successfully. Jul 14 23:12:52.729904 env[1247]: time="2025-07-14T23:12:52.729884558Z" level=info msg="CreateContainer within sandbox \"d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"95c26d66cca9296c24bfba8bf867bbb24487341ba38b30f2bb25d62c2ef62da0\"" Jul 14 23:12:52.730853 env[1247]: time="2025-07-14T23:12:52.730491997Z" level=info msg="StartContainer for \"95c26d66cca9296c24bfba8bf867bbb24487341ba38b30f2bb25d62c2ef62da0\"" Jul 14 23:12:52.753539 systemd[1]: Started cri-containerd-95c26d66cca9296c24bfba8bf867bbb24487341ba38b30f2bb25d62c2ef62da0.scope. Jul 14 23:12:52.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766859 kernel: audit: type=1400 audit(1752534772.763:1287): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.765000 audit: BPF prog-id=193 op=LOAD Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3828 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:52.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935633236643636636361393239366332346266626138626638363762 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3828 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:52.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935633236643636636361393239366332346266626138626638363762 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit: BPF prog-id=194 op=LOAD Jul 14 23:12:52.766000 audit[4210]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00033dd40 items=0 ppid=3828 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:52.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935633236643636636361393239366332346266626138626638363762 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit: BPF prog-id=195 op=LOAD Jul 14 23:12:52.766000 audit[4210]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00033dd88 items=0 ppid=3828 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:52.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935633236643636636361393239366332346266626138626638363762 Jul 14 23:12:52.766000 audit: BPF prog-id=195 op=UNLOAD Jul 14 23:12:52.766000 audit: BPF prog-id=194 op=UNLOAD Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:52.766000 audit: BPF prog-id=196 op=LOAD Jul 14 23:12:52.766000 audit[4210]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003a6198 items=0 ppid=3828 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:52.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935633236643636636361393239366332346266626138626638363762 Jul 14 23:12:52.793375 env[1247]: time="2025-07-14T23:12:52.792541774Z" level=info msg="StartContainer for \"95c26d66cca9296c24bfba8bf867bbb24487341ba38b30f2bb25d62c2ef62da0\" returns successfully" Jul 14 23:12:52.818000 audit[4220]: AVC avc: denied { search } for pid=4220 comm="nginx" name="crypto" dev="proc" ino=40606 scontext=system_u:system_r:svirt_lxc_net_t:s0:c507,c805 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 14 23:12:52.818000 audit[4220]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fdd601b1728 a2=0 a3=0 items=0 ppid=3828 pid=4220 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c507,c805 key=(null) Jul 14 23:12:52.818000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 14 23:12:52.972493 systemd[1]: run-containerd-runc-k8s.io-95c26d66cca9296c24bfba8bf867bbb24487341ba38b30f2bb25d62c2ef62da0-runc.7SANYu.mount: Deactivated successfully. Jul 14 23:12:53.059727 kubelet[2110]: I0714 23:12:53.058566 2110 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:12:53.749430 env[1247]: time="2025-07-14T23:12:53.749407528Z" level=info msg="StopPodSandbox for \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\"" Jul 14 23:12:53.933264 kubelet[2110]: I0714 23:12:53.933062 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5945579587-t5992" podStartSLOduration=37.294429248 podStartE2EDuration="41.933044973s" podCreationTimestamp="2025-07-14 23:12:12 +0000 UTC" firstStartedPulling="2025-07-14 23:12:46.131933123 +0000 UTC m=+47.608539620" lastFinishedPulling="2025-07-14 23:12:50.770548844 +0000 UTC m=+52.247155345" observedRunningTime="2025-07-14 23:12:52.051683667 +0000 UTC m=+53.528290176" watchObservedRunningTime="2025-07-14 23:12:53.933044973 +0000 UTC m=+55.409651475" Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:53.933 [INFO][4249] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:53.934 [INFO][4249] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" iface="eth0" netns="/var/run/netns/cni-16aee4cb-63dd-f6c8-7798-a66c482c02de" Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:53.935 [INFO][4249] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" iface="eth0" netns="/var/run/netns/cni-16aee4cb-63dd-f6c8-7798-a66c482c02de" Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:53.938 [INFO][4249] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" iface="eth0" netns="/var/run/netns/cni-16aee4cb-63dd-f6c8-7798-a66c482c02de" Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:53.939 [INFO][4249] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:53.939 [INFO][4249] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:54.460 [INFO][4256] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" HandleID="k8s-pod-network.a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Workload="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:54.462 [INFO][4256] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:54.462 [INFO][4256] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:54.484 [WARNING][4256] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" HandleID="k8s-pod-network.a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Workload="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:54.484 [INFO][4256] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" HandleID="k8s-pod-network.a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Workload="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:54.485 [INFO][4256] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:54.488933 env[1247]: 2025-07-14 23:12:54.487 [INFO][4249] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:12:54.493990 env[1247]: time="2025-07-14T23:12:54.492130552Z" level=info msg="TearDown network for sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\" successfully" Jul 14 23:12:54.493990 env[1247]: time="2025-07-14T23:12:54.492174427Z" level=info msg="StopPodSandbox for \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\" returns successfully" Jul 14 23:12:54.491305 systemd[1]: run-netns-cni\x2d16aee4cb\x2d63dd\x2df6c8\x2d7798\x2da66c482c02de.mount: Deactivated successfully. Jul 14 23:12:54.501810 env[1247]: time="2025-07-14T23:12:54.501790315Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5945579587-z48mb,Uid:12707600-10bf-4bfb-be4a-9dc5ca0bfb2f,Namespace:calico-apiserver,Attempt:1,}" Jul 14 23:12:54.802939 systemd-networkd[1061]: cali3cbbf8e42e3: Link UP Jul 14 23:12:54.809006 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 23:12:54.809077 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3cbbf8e42e3: link becomes ready Jul 14 23:12:54.806021 systemd-networkd[1061]: cali3cbbf8e42e3: Gained carrier Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.546 [INFO][4262] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5945579587--z48mb-eth0 calico-apiserver-5945579587- calico-apiserver 12707600-10bf-4bfb-be4a-9dc5ca0bfb2f 1027 0 2025-07-14 23:12:12 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5945579587 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5945579587-z48mb eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali3cbbf8e42e3 [] [] }} ContainerID="240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-z48mb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--z48mb-" Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.546 [INFO][4262] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-z48mb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.574 [INFO][4275] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" HandleID="k8s-pod-network.240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" Workload="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.574 [INFO][4275] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" HandleID="k8s-pod-network.240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" Workload="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5945579587-z48mb", "timestamp":"2025-07-14 23:12:54.574224015 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.574 [INFO][4275] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.574 [INFO][4275] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.574 [INFO][4275] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.703 [INFO][4275] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" host="localhost" Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.758 [INFO][4275] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.768 [INFO][4275] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.771 [INFO][4275] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.777 [INFO][4275] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.777 [INFO][4275] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" host="localhost" Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.779 [INFO][4275] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.783 [INFO][4275] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" host="localhost" Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.790 [INFO][4275] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" host="localhost" Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.790 [INFO][4275] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" host="localhost" Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.790 [INFO][4275] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:54.819456 env[1247]: 2025-07-14 23:12:54.790 [INFO][4275] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" HandleID="k8s-pod-network.240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" Workload="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:12:54.826058 env[1247]: 2025-07-14 23:12:54.793 [INFO][4262] cni-plugin/k8s.go 418: Populated endpoint ContainerID="240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-z48mb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5945579587--z48mb-eth0", GenerateName:"calico-apiserver-5945579587-", Namespace:"calico-apiserver", SelfLink:"", UID:"12707600-10bf-4bfb-be4a-9dc5ca0bfb2f", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5945579587", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5945579587-z48mb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3cbbf8e42e3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:54.826058 env[1247]: 2025-07-14 23:12:54.793 [INFO][4262] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-z48mb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:12:54.826058 env[1247]: 2025-07-14 23:12:54.793 [INFO][4262] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3cbbf8e42e3 ContainerID="240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-z48mb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:12:54.826058 env[1247]: 2025-07-14 23:12:54.807 [INFO][4262] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-z48mb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:12:54.826058 env[1247]: 2025-07-14 23:12:54.808 [INFO][4262] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-z48mb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5945579587--z48mb-eth0", GenerateName:"calico-apiserver-5945579587-", Namespace:"calico-apiserver", SelfLink:"", UID:"12707600-10bf-4bfb-be4a-9dc5ca0bfb2f", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5945579587", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee", Pod:"calico-apiserver-5945579587-z48mb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3cbbf8e42e3", MAC:"32:74:8c:33:06:28", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:54.826058 env[1247]: 2025-07-14 23:12:54.816 [INFO][4262] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee" Namespace="calico-apiserver" Pod="calico-apiserver-5945579587-z48mb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:12:54.834130 env[1247]: time="2025-07-14T23:12:54.834008478Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:54.834262 env[1247]: time="2025-07-14T23:12:54.834117565Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:54.834262 env[1247]: time="2025-07-14T23:12:54.834129693Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:54.834455 env[1247]: time="2025-07-14T23:12:54.834405585Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee pid=4296 runtime=io.containerd.runc.v2 Jul 14 23:12:54.847849 systemd[1]: Started cri-containerd-240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee.scope. Jul 14 23:12:54.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit: BPF prog-id=197 op=LOAD Jul 14 23:12:54.872000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4296 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:54.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303239366663396261393464626330656166323035666562613538 Jul 14 23:12:54.872000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4296 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:54.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303239366663396261393464626330656166323035666562613538 Jul 14 23:12:54.872000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.872000 audit: BPF prog-id=198 op=LOAD Jul 14 23:12:54.872000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003da1f0 items=0 ppid=4296 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:54.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303239366663396261393464626330656166323035666562613538 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit: BPF prog-id=199 op=LOAD Jul 14 23:12:54.873000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003da238 items=0 ppid=4296 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:54.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303239366663396261393464626330656166323035666562613538 Jul 14 23:12:54.873000 audit: BPF prog-id=199 op=UNLOAD Jul 14 23:12:54.873000 audit: BPF prog-id=198 op=UNLOAD Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:54.873000 audit: BPF prog-id=200 op=LOAD Jul 14 23:12:54.873000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003da648 items=0 ppid=4296 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:54.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303239366663396261393464626330656166323035666562613538 Jul 14 23:12:54.879865 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:54.900906 env[1247]: time="2025-07-14T23:12:54.900879734Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5945579587-z48mb,Uid:12707600-10bf-4bfb-be4a-9dc5ca0bfb2f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee\"" Jul 14 23:12:54.939000 audit[4332]: NETFILTER_CFG table=filter:115 family=2 entries=53 op=nft_register_chain pid=4332 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:54.939000 audit[4332]: SYSCALL arch=c000003e syscall=46 success=yes exit=26640 a0=3 a1=7ffcd8d1be40 a2=0 a3=7ffcd8d1be2c items=0 ppid=3486 pid=4332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:54.939000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:54.954757 env[1247]: time="2025-07-14T23:12:54.954710688Z" level=info msg="CreateContainer within sandbox \"240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 23:12:54.963261 env[1247]: time="2025-07-14T23:12:54.963229034Z" level=info msg="CreateContainer within sandbox \"240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"d2e15ecf7c29039292ca7fb77fb05d18f978b5f1396a639782519e908676c9fa\"" Jul 14 23:12:54.971835 env[1247]: time="2025-07-14T23:12:54.971151453Z" level=info msg="StartContainer for \"d2e15ecf7c29039292ca7fb77fb05d18f978b5f1396a639782519e908676c9fa\"" Jul 14 23:12:54.984694 systemd[1]: Started cri-containerd-d2e15ecf7c29039292ca7fb77fb05d18f978b5f1396a639782519e908676c9fa.scope. Jul 14 23:12:55.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.014000 audit: BPF prog-id=201 op=LOAD Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4296 pid=4342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:55.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432653135656366376332393033393239326361376662373766623035 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4296 pid=4342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:55.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432653135656366376332393033393239326361376662373766623035 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit: BPF prog-id=202 op=LOAD Jul 14 23:12:55.015000 audit[4342]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00022bd30 items=0 ppid=4296 pid=4342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:55.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432653135656366376332393033393239326361376662373766623035 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit: BPF prog-id=203 op=LOAD Jul 14 23:12:55.015000 audit[4342]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00022bd78 items=0 ppid=4296 pid=4342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:55.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432653135656366376332393033393239326361376662373766623035 Jul 14 23:12:55.015000 audit: BPF prog-id=203 op=UNLOAD Jul 14 23:12:55.015000 audit: BPF prog-id=202 op=UNLOAD Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { perfmon } for pid=4342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit[4342]: AVC avc: denied { bpf } for pid=4342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.015000 audit: BPF prog-id=204 op=LOAD Jul 14 23:12:55.015000 audit[4342]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000276188 items=0 ppid=4296 pid=4342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:55.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432653135656366376332393033393239326361376662373766623035 Jul 14 23:12:55.071290 env[1247]: time="2025-07-14T23:12:55.071262602Z" level=info msg="StartContainer for \"d2e15ecf7c29039292ca7fb77fb05d18f978b5f1396a639782519e908676c9fa\" returns successfully" Jul 14 23:12:55.232000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:55.232000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:55.232000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002eda3a0 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:12:55.232000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:55.232000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002dbe570 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:12:55.232000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:55.568000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:55.568000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00add0e40 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:12:55.568000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:12:55.568000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:55.568000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00afa9840 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:12:55.568000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:12:55.569000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:55.569000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00ab792c0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:12:55.569000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:12:55.578000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:55.578000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00ab792f0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:12:55.578000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:12:55.597000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:55.597000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00aea2820 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:12:55.597000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:12:55.597000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:55.597000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00ab794a0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:12:55.597000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:12:55.714651 env[1247]: time="2025-07-14T23:12:55.714619959Z" level=info msg="StopPodSandbox for \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\"" Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.786 [INFO][4382] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.786 [INFO][4382] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" iface="eth0" netns="/var/run/netns/cni-f5ee0b2d-010f-f9b1-669f-a0dd9516cce3" Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.786 [INFO][4382] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" iface="eth0" netns="/var/run/netns/cni-f5ee0b2d-010f-f9b1-669f-a0dd9516cce3" Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.786 [INFO][4382] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" iface="eth0" netns="/var/run/netns/cni-f5ee0b2d-010f-f9b1-669f-a0dd9516cce3" Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.786 [INFO][4382] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.786 [INFO][4382] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.813 [INFO][4389] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" HandleID="k8s-pod-network.dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Workload="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.813 [INFO][4389] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.813 [INFO][4389] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.818 [WARNING][4389] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" HandleID="k8s-pod-network.dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Workload="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.818 [INFO][4389] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" HandleID="k8s-pod-network.dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Workload="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.820 [INFO][4389] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:55.826405 env[1247]: 2025-07-14 23:12:55.822 [INFO][4382] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:12:55.830556 env[1247]: time="2025-07-14T23:12:55.830151372Z" level=info msg="TearDown network for sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\" successfully" Jul 14 23:12:55.830556 env[1247]: time="2025-07-14T23:12:55.830173163Z" level=info msg="StopPodSandbox for \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\" returns successfully" Jul 14 23:12:55.828560 systemd[1]: run-netns-cni\x2df5ee0b2d\x2d010f\x2df9b1\x2d669f\x2da0dd9516cce3.mount: Deactivated successfully. Jul 14 23:12:55.832124 env[1247]: time="2025-07-14T23:12:55.831128310Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f8fg8,Uid:c6c195e3-b7bd-48dc-b09c-98461d031cf2,Namespace:calico-system,Attempt:1,}" Jul 14 23:12:55.961255 systemd-networkd[1061]: cali445cc79266b: Link UP Jul 14 23:12:55.963543 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 23:12:55.963594 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali445cc79266b: link becomes ready Jul 14 23:12:55.963826 systemd-networkd[1061]: cali445cc79266b: Gained carrier Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.887 [INFO][4395] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--f8fg8-eth0 csi-node-driver- calico-system c6c195e3-b7bd-48dc-b09c-98461d031cf2 1037 0 2025-07-14 23:12:15 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-f8fg8 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali445cc79266b [] [] }} ContainerID="afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" Namespace="calico-system" Pod="csi-node-driver-f8fg8" WorkloadEndpoint="localhost-k8s-csi--node--driver--f8fg8-" Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.887 [INFO][4395] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" Namespace="calico-system" Pod="csi-node-driver-f8fg8" WorkloadEndpoint="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.916 [INFO][4409] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" HandleID="k8s-pod-network.afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" Workload="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.916 [INFO][4409] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" HandleID="k8s-pod-network.afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" Workload="localhost-k8s-csi--node--driver--f8fg8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-f8fg8", "timestamp":"2025-07-14 23:12:55.916471016 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.916 [INFO][4409] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.916 [INFO][4409] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.916 [INFO][4409] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.927 [INFO][4409] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" host="localhost" Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.937 [INFO][4409] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.942 [INFO][4409] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.943 [INFO][4409] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.944 [INFO][4409] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.944 [INFO][4409] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" host="localhost" Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.945 [INFO][4409] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057 Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.951 [INFO][4409] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" host="localhost" Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.956 [INFO][4409] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" host="localhost" Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.956 [INFO][4409] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" host="localhost" Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.956 [INFO][4409] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:55.985340 env[1247]: 2025-07-14 23:12:55.956 [INFO][4409] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" HandleID="k8s-pod-network.afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" Workload="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:12:55.987266 env[1247]: 2025-07-14 23:12:55.958 [INFO][4395] cni-plugin/k8s.go 418: Populated endpoint ContainerID="afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" Namespace="calico-system" Pod="csi-node-driver-f8fg8" WorkloadEndpoint="localhost-k8s-csi--node--driver--f8fg8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--f8fg8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c6c195e3-b7bd-48dc-b09c-98461d031cf2", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-f8fg8", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali445cc79266b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:55.987266 env[1247]: 2025-07-14 23:12:55.958 [INFO][4395] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" Namespace="calico-system" Pod="csi-node-driver-f8fg8" WorkloadEndpoint="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:12:55.987266 env[1247]: 2025-07-14 23:12:55.958 [INFO][4395] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali445cc79266b ContainerID="afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" Namespace="calico-system" Pod="csi-node-driver-f8fg8" WorkloadEndpoint="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:12:55.987266 env[1247]: 2025-07-14 23:12:55.964 [INFO][4395] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" Namespace="calico-system" Pod="csi-node-driver-f8fg8" WorkloadEndpoint="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:12:55.987266 env[1247]: 2025-07-14 23:12:55.964 [INFO][4395] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" Namespace="calico-system" Pod="csi-node-driver-f8fg8" WorkloadEndpoint="localhost-k8s-csi--node--driver--f8fg8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--f8fg8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c6c195e3-b7bd-48dc-b09c-98461d031cf2", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057", Pod:"csi-node-driver-f8fg8", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali445cc79266b", MAC:"3a:10:37:38:33:35", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:55.987266 env[1247]: 2025-07-14 23:12:55.982 [INFO][4395] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057" Namespace="calico-system" Pod="csi-node-driver-f8fg8" WorkloadEndpoint="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:12:55.998497 env[1247]: time="2025-07-14T23:12:55.998451404Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:56.000803 env[1247]: time="2025-07-14T23:12:55.998480537Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:56.000803 env[1247]: time="2025-07-14T23:12:55.998487858Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:56.000803 env[1247]: time="2025-07-14T23:12:55.998668118Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057 pid=4431 runtime=io.containerd.runc.v2 Jul 14 23:12:56.031856 systemd[1]: Started cri-containerd-afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057.scope. Jul 14 23:12:56.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.058000 audit: BPF prog-id=205 op=LOAD Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4431 pid=4441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.059000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166643239386333643738336636643539666438353131376661366262 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4431 pid=4441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.059000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166643239386333643738336636643539666438353131376661366262 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit: BPF prog-id=206 op=LOAD Jul 14 23:12:56.059000 audit[4441]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00037e260 items=0 ppid=4431 pid=4441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.059000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166643239386333643738336636643539666438353131376661366262 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit: BPF prog-id=207 op=LOAD Jul 14 23:12:56.059000 audit[4441]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00037e2a8 items=0 ppid=4431 pid=4441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.059000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166643239386333643738336636643539666438353131376661366262 Jul 14 23:12:56.059000 audit: BPF prog-id=207 op=UNLOAD Jul 14 23:12:56.059000 audit: BPF prog-id=206 op=UNLOAD Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { perfmon } for pid=4441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit[4441]: AVC avc: denied { bpf } for pid=4441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.059000 audit: BPF prog-id=208 op=LOAD Jul 14 23:12:56.059000 audit[4441]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00037e6b8 items=0 ppid=4431 pid=4441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.059000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166643239386333643738336636643539666438353131376661366262 Jul 14 23:12:56.061121 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:56.072703 env[1247]: time="2025-07-14T23:12:56.072678201Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f8fg8,Uid:c6c195e3-b7bd-48dc-b09c-98461d031cf2,Namespace:calico-system,Attempt:1,} returns sandbox id \"afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057\"" Jul 14 23:12:56.078000 audit[4472]: NETFILTER_CFG table=filter:116 family=2 entries=56 op=nft_register_chain pid=4472 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:56.078000 audit[4472]: SYSCALL arch=c000003e syscall=46 success=yes exit=25516 a0=3 a1=7ffdf6458910 a2=0 a3=7ffdf64588fc items=0 ppid=3486 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.078000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:56.556000 audit[4352]: AVC avc: denied { watch } for pid=4352 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.1792147082/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c468,c664 tclass=file permissive=0 Jul 14 23:12:56.556000 audit[4352]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000fa3420 a2=fc6 a3=0 items=0 ppid=4296 pid=4352 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 key=(null) Jul 14 23:12:56.556000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:12:56.628000 audit[4474]: NETFILTER_CFG table=filter:117 family=2 entries=14 op=nft_register_rule pid=4474 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:56.628000 audit[4474]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff5ae1b740 a2=0 a3=7fff5ae1b72c items=0 ppid=2217 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.628000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:56.634000 audit[4474]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=4474 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:56.634000 audit[4474]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff5ae1b740 a2=0 a3=7fff5ae1b72c items=0 ppid=2217 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.634000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:56.723449 env[1247]: time="2025-07-14T23:12:56.723233357Z" level=info msg="StopPodSandbox for \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\"" Jul 14 23:12:56.819488 systemd-networkd[1061]: cali3cbbf8e42e3: Gained IPv6LL Jul 14 23:12:56.825684 kubelet[2110]: I0714 23:12:56.796042 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5945579587-z48mb" podStartSLOduration=44.761240502 podStartE2EDuration="44.761240502s" podCreationTimestamp="2025-07-14 23:12:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:12:56.188912572 +0000 UTC m=+57.665519082" watchObservedRunningTime="2025-07-14 23:12:56.761240502 +0000 UTC m=+58.237847006" Jul 14 23:12:56.837000 audit[4489]: NETFILTER_CFG table=filter:119 family=2 entries=13 op=nft_register_rule pid=4489 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:56.837000 audit[4489]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffce006b400 a2=0 a3=7ffce006b3ec items=0 ppid=2217 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.837000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:56.844000 audit[4489]: NETFILTER_CFG table=nat:120 family=2 entries=27 op=nft_register_chain pid=4489 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:56.844000 audit[4489]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffce006b400 a2=0 a3=7ffce006b3ec items=0 ppid=2217 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.844000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:57.392902 systemd-networkd[1061]: cali445cc79266b: Gained IPv6LL Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.152 [INFO][4484] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.155 [INFO][4484] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" iface="eth0" netns="/var/run/netns/cni-a0258747-d762-8715-2afc-16797fc225d0" Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.155 [INFO][4484] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" iface="eth0" netns="/var/run/netns/cni-a0258747-d762-8715-2afc-16797fc225d0" Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.158 [INFO][4484] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" iface="eth0" netns="/var/run/netns/cni-a0258747-d762-8715-2afc-16797fc225d0" Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.158 [INFO][4484] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.158 [INFO][4484] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.505 [INFO][4495] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" HandleID="k8s-pod-network.2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Workload="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.506 [INFO][4495] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.507 [INFO][4495] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.524 [WARNING][4495] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" HandleID="k8s-pod-network.2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Workload="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.524 [INFO][4495] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" HandleID="k8s-pod-network.2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Workload="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.526 [INFO][4495] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:57.530583 env[1247]: 2025-07-14 23:12:57.528 [INFO][4484] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:12:57.538012 env[1247]: time="2025-07-14T23:12:57.532315450Z" level=info msg="TearDown network for sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\" successfully" Jul 14 23:12:57.538012 env[1247]: time="2025-07-14T23:12:57.532341089Z" level=info msg="StopPodSandbox for \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\" returns successfully" Jul 14 23:12:57.542198 systemd[1]: run-netns-cni\x2da0258747\x2dd762\x2d8715\x2d2afc\x2d16797fc225d0.mount: Deactivated successfully. Jul 14 23:12:57.563675 env[1247]: time="2025-07-14T23:12:57.563651493Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-hc4sl,Uid:5eaa0559-9369-4157-b0a8-d3529d54a14d,Namespace:calico-system,Attempt:1,}" Jul 14 23:12:57.704649 systemd-networkd[1061]: cali516d75bc68d: Link UP Jul 14 23:12:57.707030 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 23:12:57.710982 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali516d75bc68d: link becomes ready Jul 14 23:12:57.707511 systemd-networkd[1061]: cali516d75bc68d: Gained carrier Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.631 [INFO][4507] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0 goldmane-768f4c5c69- calico-system 5eaa0559-9369-4157-b0a8-d3529d54a14d 1058 0 2025-07-14 23:12:14 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-hc4sl eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali516d75bc68d [] [] }} ContainerID="b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" Namespace="calico-system" Pod="goldmane-768f4c5c69-hc4sl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--hc4sl-" Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.631 [INFO][4507] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" Namespace="calico-system" Pod="goldmane-768f4c5c69-hc4sl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.662 [INFO][4520] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" HandleID="k8s-pod-network.b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" Workload="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.662 [INFO][4520] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" HandleID="k8s-pod-network.b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" Workload="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-hc4sl", "timestamp":"2025-07-14 23:12:57.662112357 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.662 [INFO][4520] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.662 [INFO][4520] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.662 [INFO][4520] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.676 [INFO][4520] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" host="localhost" Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.680 [INFO][4520] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.682 [INFO][4520] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.683 [INFO][4520] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.685 [INFO][4520] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.685 [INFO][4520] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" host="localhost" Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.686 [INFO][4520] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.691 [INFO][4520] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" host="localhost" Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.697 [INFO][4520] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" host="localhost" Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.697 [INFO][4520] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" host="localhost" Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.698 [INFO][4520] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:57.725968 env[1247]: 2025-07-14 23:12:57.698 [INFO][4520] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" HandleID="k8s-pod-network.b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" Workload="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:12:57.732943 env[1247]: 2025-07-14 23:12:57.699 [INFO][4507] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" Namespace="calico-system" Pod="goldmane-768f4c5c69-hc4sl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"5eaa0559-9369-4157-b0a8-d3529d54a14d", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-hc4sl", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali516d75bc68d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:57.732943 env[1247]: 2025-07-14 23:12:57.700 [INFO][4507] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" Namespace="calico-system" Pod="goldmane-768f4c5c69-hc4sl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:12:57.732943 env[1247]: 2025-07-14 23:12:57.700 [INFO][4507] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali516d75bc68d ContainerID="b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" Namespace="calico-system" Pod="goldmane-768f4c5c69-hc4sl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:12:57.732943 env[1247]: 2025-07-14 23:12:57.709 [INFO][4507] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" Namespace="calico-system" Pod="goldmane-768f4c5c69-hc4sl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:12:57.732943 env[1247]: 2025-07-14 23:12:57.709 [INFO][4507] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" Namespace="calico-system" Pod="goldmane-768f4c5c69-hc4sl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"5eaa0559-9369-4157-b0a8-d3529d54a14d", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a", Pod:"goldmane-768f4c5c69-hc4sl", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali516d75bc68d", MAC:"06:b6:73:da:c7:44", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:57.732943 env[1247]: 2025-07-14 23:12:57.723 [INFO][4507] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a" Namespace="calico-system" Pod="goldmane-768f4c5c69-hc4sl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:12:57.735238 env[1247]: time="2025-07-14T23:12:57.734660160Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:57.735238 env[1247]: time="2025-07-14T23:12:57.734694768Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:57.735238 env[1247]: time="2025-07-14T23:12:57.734704049Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:57.735238 env[1247]: time="2025-07-14T23:12:57.734864575Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a pid=4540 runtime=io.containerd.runc.v2 Jul 14 23:12:57.770212 systemd[1]: Started cri-containerd-b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a.scope. Jul 14 23:12:57.787220 kernel: kauditd_printk_skb: 275 callbacks suppressed Jul 14 23:12:57.787877 kernel: audit: type=1400 audit(1752534777.783:1375): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.788674 kernel: audit: type=1400 audit(1752534777.783:1376): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.793053 kernel: audit: type=1400 audit(1752534777.783:1377): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.795807 kernel: audit: type=1400 audit(1752534777.783:1378): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.798421 kernel: audit: type=1400 audit(1752534777.783:1379): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.798863 kernel: audit: type=1400 audit(1752534777.783:1380): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.798711 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:57.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.804141 kernel: audit: type=1400 audit(1752534777.783:1381): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.807819 kernel: audit: type=1400 audit(1752534777.783:1382): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.813129 kernel: audit: type=1400 audit(1752534777.783:1383): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.813172 kernel: audit: type=1400 audit(1752534777.786:1384): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit: BPF prog-id=209 op=LOAD Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4540 pid=4551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237396535623565303030356436633962653934663833386236303065 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4540 pid=4551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237396535623565303030356436633962653934663833386236303065 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit: BPF prog-id=210 op=LOAD Jul 14 23:12:57.786000 audit[4551]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00027e730 items=0 ppid=4540 pid=4551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237396535623565303030356436633962653934663833386236303065 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit: BPF prog-id=211 op=LOAD Jul 14 23:12:57.786000 audit[4551]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00027e778 items=0 ppid=4540 pid=4551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237396535623565303030356436633962653934663833386236303065 Jul 14 23:12:57.786000 audit: BPF prog-id=211 op=UNLOAD Jul 14 23:12:57.786000 audit: BPF prog-id=210 op=UNLOAD Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { perfmon } for pid=4551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit[4551]: AVC avc: denied { bpf } for pid=4551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.786000 audit: BPF prog-id=212 op=LOAD Jul 14 23:12:57.786000 audit[4551]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00027eb88 items=0 ppid=4540 pid=4551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237396535623565303030356436633962653934663833386236303065 Jul 14 23:12:57.878481 env[1247]: time="2025-07-14T23:12:57.829675581Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-hc4sl,Uid:5eaa0559-9369-4157-b0a8-d3529d54a14d,Namespace:calico-system,Attempt:1,} returns sandbox id \"b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a\"" Jul 14 23:12:57.889000 audit[4577]: NETFILTER_CFG table=filter:121 family=2 entries=68 op=nft_register_chain pid=4577 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:57.889000 audit[4577]: SYSCALL arch=c000003e syscall=46 success=yes exit=32308 a0=3 a1=7fff316a5600 a2=0 a3=7fff316a55ec items=0 ppid=3486 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.889000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:58.992990 systemd-networkd[1061]: cali516d75bc68d: Gained IPv6LL Jul 14 23:13:01.785223 env[1247]: time="2025-07-14T23:13:01.785180899Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:01.818640 env[1247]: time="2025-07-14T23:13:01.792356225Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:01.818640 env[1247]: time="2025-07-14T23:13:01.797937097Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:01.818640 env[1247]: time="2025-07-14T23:13:01.799587442Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:01.818640 env[1247]: time="2025-07-14T23:13:01.799857826Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 14 23:13:02.736802 env[1247]: time="2025-07-14T23:13:02.736767746Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 14 23:13:02.738765 env[1247]: time="2025-07-14T23:13:02.738582091Z" level=info msg="StopPodSandbox for \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\"" Jul 14 23:13:02.757000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:02.804243 kernel: kauditd_printk_skb: 56 callbacks suppressed Jul 14 23:13:02.817015 kernel: audit: type=1400 audit(1752534782.800:1396): avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:02.826372 kernel: audit: type=1300 audit(1752534782.800:1396): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002edb920 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:13:02.829251 kernel: audit: type=1327 audit(1752534782.800:1396): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:02.832707 kernel: audit: type=1400 audit(1752534782.814:1397): avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:02.832739 kernel: audit: type=1300 audit(1752534782.814:1397): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002edb940 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:13:02.834812 kernel: audit: type=1327 audit(1752534782.814:1397): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:02.757000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001632100 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:13:02.757000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:02.778000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:02.778000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002edb780 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:13:02.778000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:02.800000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:02.800000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002edb920 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:13:02.800000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:02.814000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:02.814000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002edb940 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:13:02.814000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:02.917779 kubelet[2110]: E0714 23:13:02.917733 2110 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="3.779s" Jul 14 23:13:03.416636 env[1247]: time="2025-07-14T23:13:03.416606242Z" level=info msg="CreateContainer within sandbox \"b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 14 23:13:03.525917 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2814212556.mount: Deactivated successfully. Jul 14 23:13:03.567434 env[1247]: time="2025-07-14T23:13:03.535128863Z" level=info msg="CreateContainer within sandbox \"b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"546ce2ce3dcf54230cf3d7886316a79c2cc9a23a07ab2f84d7984d45e2453014\"" Jul 14 23:13:03.567434 env[1247]: time="2025-07-14T23:13:03.535511786Z" level=info msg="StartContainer for \"546ce2ce3dcf54230cf3d7886316a79c2cc9a23a07ab2f84d7984d45e2453014\"" Jul 14 23:13:03.590884 systemd[1]: Started cri-containerd-546ce2ce3dcf54230cf3d7886316a79c2cc9a23a07ab2f84d7984d45e2453014.scope. Jul 14 23:13:03.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.660964 kernel: audit: type=1400 audit(1752534783.613:1398): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.661032 kernel: audit: type=1400 audit(1752534783.613:1399): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.661063 kernel: audit: type=1400 audit(1752534783.613:1400): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.661083 kernel: audit: type=1400 audit(1752534783.613:1401): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.614000 audit: BPF prog-id=213 op=LOAD Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3935 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:03.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534366365326365336463663534323330636633643738383633313661 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3935 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:03.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534366365326365336463663534323330636633643738383633313661 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit: BPF prog-id=214 op=LOAD Jul 14 23:13:03.622000 audit[4605]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002c4a40 items=0 ppid=3935 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:03.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534366365326365336463663534323330636633643738383633313661 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit: BPF prog-id=215 op=LOAD Jul 14 23:13:03.622000 audit[4605]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002c4a88 items=0 ppid=3935 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:03.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534366365326365336463663534323330636633643738383633313661 Jul 14 23:13:03.622000 audit: BPF prog-id=215 op=UNLOAD Jul 14 23:13:03.622000 audit: BPF prog-id=214 op=UNLOAD Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:03.622000 audit: BPF prog-id=216 op=LOAD Jul 14 23:13:03.622000 audit[4605]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002c4e98 items=0 ppid=3935 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:03.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534366365326365336463663534323330636633643738383633313661 Jul 14 23:13:03.703102 env[1247]: time="2025-07-14T23:13:03.652124760Z" level=info msg="StartContainer for \"546ce2ce3dcf54230cf3d7886316a79c2cc9a23a07ab2f84d7984d45e2453014\" returns successfully" Jul 14 23:13:03.930001 kubelet[2110]: I0714 23:13:03.921771 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-6dfbf78cff-fbjqb" podStartSLOduration=33.813502972 podStartE2EDuration="48.900420895s" podCreationTimestamp="2025-07-14 23:12:15 +0000 UTC" firstStartedPulling="2025-07-14 23:12:47.528797483 +0000 UTC m=+49.005403984" lastFinishedPulling="2025-07-14 23:13:02.61571541 +0000 UTC m=+64.092321907" observedRunningTime="2025-07-14 23:13:03.896776389 +0000 UTC m=+65.373382891" watchObservedRunningTime="2025-07-14 23:13:03.900420895 +0000 UTC m=+65.377027399" Jul 14 23:13:05.098382 systemd[1]: run-containerd-runc-k8s.io-546ce2ce3dcf54230cf3d7886316a79c2cc9a23a07ab2f84d7984d45e2453014-runc.GzrkTj.mount: Deactivated successfully. Jul 14 23:13:07.222105 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount8398294.mount: Deactivated successfully. Jul 14 23:13:08.426138 env[1247]: time="2025-07-14T23:13:08.426050016Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:08.499091 env[1247]: time="2025-07-14T23:13:08.440447824Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:08.499091 env[1247]: time="2025-07-14T23:13:08.446428243Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:08.499091 env[1247]: time="2025-07-14T23:13:08.452088506Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:08.499091 env[1247]: time="2025-07-14T23:13:08.452334502Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 14 23:13:08.544449 env[1247]: time="2025-07-14T23:13:08.544418379Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 14 23:13:08.802752 env[1247]: 2025-07-14 23:13:04.003 [WARNING][4589] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"5eaa0559-9369-4157-b0a8-d3529d54a14d", ResourceVersion:"1061", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a", Pod:"goldmane-768f4c5c69-hc4sl", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali516d75bc68d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:08.802752 env[1247]: 2025-07-14 23:13:04.024 [INFO][4589] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:13:08.802752 env[1247]: 2025-07-14 23:13:04.024 [INFO][4589] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" iface="eth0" netns="" Jul 14 23:13:08.802752 env[1247]: 2025-07-14 23:13:04.024 [INFO][4589] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:13:08.802752 env[1247]: 2025-07-14 23:13:04.024 [INFO][4589] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:13:08.802752 env[1247]: 2025-07-14 23:13:08.396 [INFO][4660] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" HandleID="k8s-pod-network.2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Workload="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:13:08.802752 env[1247]: 2025-07-14 23:13:08.439 [INFO][4660] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:08.802752 env[1247]: 2025-07-14 23:13:08.445 [INFO][4660] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:08.802752 env[1247]: 2025-07-14 23:13:08.720 [WARNING][4660] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" HandleID="k8s-pod-network.2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Workload="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:13:08.802752 env[1247]: 2025-07-14 23:13:08.720 [INFO][4660] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" HandleID="k8s-pod-network.2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Workload="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:13:08.802752 env[1247]: 2025-07-14 23:13:08.722 [INFO][4660] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:08.802752 env[1247]: 2025-07-14 23:13:08.762 [INFO][4589] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:13:08.818631 env[1247]: time="2025-07-14T23:13:08.802719450Z" level=info msg="TearDown network for sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\" successfully" Jul 14 23:13:08.818631 env[1247]: time="2025-07-14T23:13:08.803056046Z" level=info msg="StopPodSandbox for \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\" returns successfully" Jul 14 23:13:09.430211 env[1247]: time="2025-07-14T23:13:09.429579262Z" level=info msg="CreateContainer within sandbox \"d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 14 23:13:09.430211 env[1247]: time="2025-07-14T23:13:09.429842600Z" level=info msg="RemovePodSandbox for \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\"" Jul 14 23:13:09.430211 env[1247]: time="2025-07-14T23:13:09.429856586Z" level=info msg="Forcibly stopping sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\"" Jul 14 23:13:09.446156 env[1247]: time="2025-07-14T23:13:09.446120680Z" level=info msg="CreateContainer within sandbox \"d4b717c036c9a7d029a9fb6e9c7284a1d06a0723be27c2bd5798baa19d98b993\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"412801aa1f2787dfc64a9fc6597385d7cbbc85105fb3883acabdeb6d1ee0404d\"" Jul 14 23:13:09.471934 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3159670207.mount: Deactivated successfully. Jul 14 23:13:09.552034 env[1247]: time="2025-07-14T23:13:09.552009273Z" level=info msg="StartContainer for \"412801aa1f2787dfc64a9fc6597385d7cbbc85105fb3883acabdeb6d1ee0404d\"" Jul 14 23:13:09.812917 systemd[1]: Started cri-containerd-412801aa1f2787dfc64a9fc6597385d7cbbc85105fb3883acabdeb6d1ee0404d.scope. Jul 14 23:13:09.854795 kernel: kauditd_printk_skb: 53 callbacks suppressed Jul 14 23:13:09.874442 kernel: audit: type=1400 audit(1752534789.848:1416): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.879919 kernel: audit: type=1400 audit(1752534789.848:1417): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.891836 kernel: audit: type=1400 audit(1752534789.848:1418): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.894278 kernel: audit: type=1400 audit(1752534789.848:1419): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.897370 kernel: audit: type=1400 audit(1752534789.848:1420): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.901882 kernel: audit: type=1400 audit(1752534789.848:1421): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.909052 kernel: audit: type=1400 audit(1752534789.848:1422): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.916171 kernel: audit: type=1400 audit(1752534789.848:1423): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.916224 kernel: audit: type=1400 audit(1752534789.848:1424): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.916243 kernel: audit: type=1400 audit(1752534789.848:1425): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit: BPF prog-id=217 op=LOAD Jul 14 23:13:09.848000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[4738]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3828 pid=4738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:09.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431323830316161316632373837646663363461396663363539373338 Jul 14 23:13:09.848000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[4738]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=3828 pid=4738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:09.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431323830316161316632373837646663363461396663363539373338 Jul 14 23:13:09.848000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.848000 audit: BPF prog-id=218 op=LOAD Jul 14 23:13:09.848000 audit[4738]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002d96e0 items=0 ppid=3828 pid=4738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:09.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431323830316161316632373837646663363461396663363539373338 Jul 14 23:13:09.851000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.851000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.851000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.851000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.851000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.851000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.851000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.851000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.851000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.851000 audit: BPF prog-id=219 op=LOAD Jul 14 23:13:09.851000 audit[4738]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002d9728 items=0 ppid=3828 pid=4738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:09.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431323830316161316632373837646663363461396663363539373338 Jul 14 23:13:09.854000 audit: BPF prog-id=219 op=UNLOAD Jul 14 23:13:09.854000 audit: BPF prog-id=218 op=UNLOAD Jul 14 23:13:09.854000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.854000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.854000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.854000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.854000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.854000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.854000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.854000 audit[4738]: AVC avc: denied { perfmon } for pid=4738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.854000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.854000 audit[4738]: AVC avc: denied { bpf } for pid=4738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:09.854000 audit: BPF prog-id=220 op=LOAD Jul 14 23:13:09.854000 audit[4738]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002d9b38 items=0 ppid=3828 pid=4738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:09.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431323830316161316632373837646663363461396663363539373338 Jul 14 23:13:10.021415 env[1247]: time="2025-07-14T23:13:09.909108951Z" level=info msg="StartContainer for \"412801aa1f2787dfc64a9fc6597385d7cbbc85105fb3883acabdeb6d1ee0404d\" returns successfully" Jul 14 23:13:10.445475 systemd[1]: run-containerd-runc-k8s.io-412801aa1f2787dfc64a9fc6597385d7cbbc85105fb3883acabdeb6d1ee0404d-runc.4lnz6c.mount: Deactivated successfully. Jul 14 23:13:11.045788 kubelet[2110]: I0714 23:13:11.041380 2110 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:13:11.104306 env[1247]: time="2025-07-14T23:13:11.103158987Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:11.122202 env[1247]: time="2025-07-14T23:13:11.122175549Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:11.125724 env[1247]: time="2025-07-14T23:13:11.125705815Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:11.130406 env[1247]: time="2025-07-14T23:13:11.130385903Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:11.130654 env[1247]: time="2025-07-14T23:13:11.130627302Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 14 23:13:11.464993 env[1247]: time="2025-07-14T23:13:11.464961362Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 14 23:13:15.235742 kernel: kauditd_printk_skb: 47 callbacks suppressed Jul 14 23:13:15.429363 kernel: audit: type=1325 audit(1752534795.226:1434): table=filter:122 family=2 entries=11 op=nft_register_rule pid=4779 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:13:15.455927 kernel: audit: type=1300 audit(1752534795.226:1434): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffa072e3d0 a2=0 a3=7fffa072e3bc items=0 ppid=2217 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:15.464531 kernel: audit: type=1327 audit(1752534795.226:1434): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:13:15.472961 kernel: audit: type=1325 audit(1752534795.239:1435): table=nat:123 family=2 entries=29 op=nft_register_chain pid=4779 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:13:15.472989 kernel: audit: type=1300 audit(1752534795.239:1435): arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fffa072e3d0 a2=0 a3=7fffa072e3bc items=0 ppid=2217 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:15.479036 kernel: audit: type=1327 audit(1752534795.239:1435): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:13:15.226000 audit[4779]: NETFILTER_CFG table=filter:122 family=2 entries=11 op=nft_register_rule pid=4779 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:13:15.226000 audit[4779]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffa072e3d0 a2=0 a3=7fffa072e3bc items=0 ppid=2217 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:15.226000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:13:15.239000 audit[4779]: NETFILTER_CFG table=nat:123 family=2 entries=29 op=nft_register_chain pid=4779 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:13:15.239000 audit[4779]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fffa072e3d0 a2=0 a3=7fffa072e3bc items=0 ppid=2217 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:15.239000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:13:15.727647 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount732737831.mount: Deactivated successfully. Jul 14 23:13:17.121814 env[1247]: 2025-07-14 23:13:10.681 [WARNING][4730] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"5eaa0559-9369-4157-b0a8-d3529d54a14d", ResourceVersion:"1061", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a", Pod:"goldmane-768f4c5c69-hc4sl", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali516d75bc68d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:17.121814 env[1247]: 2025-07-14 23:13:10.710 [INFO][4730] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:13:17.121814 env[1247]: 2025-07-14 23:13:10.710 [INFO][4730] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" iface="eth0" netns="" Jul 14 23:13:17.121814 env[1247]: 2025-07-14 23:13:10.710 [INFO][4730] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:13:17.121814 env[1247]: 2025-07-14 23:13:10.710 [INFO][4730] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:13:17.121814 env[1247]: 2025-07-14 23:13:14.753 [INFO][4770] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" HandleID="k8s-pod-network.2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Workload="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:13:17.121814 env[1247]: 2025-07-14 23:13:14.924 [INFO][4770] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:17.121814 env[1247]: 2025-07-14 23:13:14.948 [INFO][4770] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:17.121814 env[1247]: 2025-07-14 23:13:16.643 [WARNING][4770] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" HandleID="k8s-pod-network.2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Workload="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:13:17.121814 env[1247]: 2025-07-14 23:13:16.774 [INFO][4770] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" HandleID="k8s-pod-network.2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Workload="localhost-k8s-goldmane--768f4c5c69--hc4sl-eth0" Jul 14 23:13:17.121814 env[1247]: 2025-07-14 23:13:16.859 [INFO][4770] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:17.121814 env[1247]: 2025-07-14 23:13:17.058 [INFO][4730] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825" Jul 14 23:13:17.162567 env[1247]: time="2025-07-14T23:13:17.122126720Z" level=info msg="TearDown network for sandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\" successfully" Jul 14 23:13:17.954679 env[1247]: time="2025-07-14T23:13:17.954493179Z" level=info msg="RemovePodSandbox \"2b0d48e639a8ae528e3a84a37cc4421dd61529f9d3813663a9ab006e6d569825\" returns successfully" Jul 14 23:13:17.970082 env[1247]: time="2025-07-14T23:13:17.970050268Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:17.972995 env[1247]: time="2025-07-14T23:13:17.972964255Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:17.975422 env[1247]: time="2025-07-14T23:13:17.975394267Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:17.977913 env[1247]: time="2025-07-14T23:13:17.977874561Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:17.978795 env[1247]: time="2025-07-14T23:13:17.978772771Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 14 23:13:22.431586 env[1247]: time="2025-07-14T23:13:22.431216874Z" level=info msg="StopPodSandbox for \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\"" Jul 14 23:13:22.502757 kubelet[2110]: I0714 23:13:22.296196 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-6c465469ff-fwz6k" podStartSLOduration=14.177315122 podStartE2EDuration="35.428221139s" podCreationTimestamp="2025-07-14 23:12:46 +0000 UTC" firstStartedPulling="2025-07-14 23:12:47.256924791 +0000 UTC m=+48.733531289" lastFinishedPulling="2025-07-14 23:13:08.507830805 +0000 UTC m=+69.984437306" observedRunningTime="2025-07-14 23:13:11.163784005 +0000 UTC m=+72.640390515" watchObservedRunningTime="2025-07-14 23:13:21.428221139 +0000 UTC m=+82.904827643" Jul 14 23:13:30.026922 env[1247]: 2025-07-14 23:13:28.854 [WARNING][4818] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--2z774-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"90c22131-18df-4c3c-beb0-cd3387b6f0f1", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34", Pod:"coredns-674b8bbfcf-2z774", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali02ef2e2549a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:30.026922 env[1247]: 2025-07-14 23:13:28.887 [INFO][4818] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:13:30.026922 env[1247]: 2025-07-14 23:13:28.889 [INFO][4818] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" iface="eth0" netns="" Jul 14 23:13:30.026922 env[1247]: 2025-07-14 23:13:28.893 [INFO][4818] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:13:30.026922 env[1247]: 2025-07-14 23:13:28.898 [INFO][4818] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:13:30.026922 env[1247]: 2025-07-14 23:13:29.958 [INFO][4837] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" HandleID="k8s-pod-network.92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Workload="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:13:30.026922 env[1247]: 2025-07-14 23:13:29.962 [INFO][4837] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:30.026922 env[1247]: 2025-07-14 23:13:29.963 [INFO][4837] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:30.026922 env[1247]: 2025-07-14 23:13:30.005 [WARNING][4837] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" HandleID="k8s-pod-network.92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Workload="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:13:30.026922 env[1247]: 2025-07-14 23:13:30.005 [INFO][4837] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" HandleID="k8s-pod-network.92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Workload="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:13:30.026922 env[1247]: 2025-07-14 23:13:30.006 [INFO][4837] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:30.026922 env[1247]: 2025-07-14 23:13:30.014 [INFO][4818] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:13:30.026922 env[1247]: time="2025-07-14T23:13:30.019949195Z" level=info msg="TearDown network for sandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\" successfully" Jul 14 23:13:30.026922 env[1247]: time="2025-07-14T23:13:30.019974303Z" level=info msg="StopPodSandbox for \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\" returns successfully" Jul 14 23:13:31.468017 env[1247]: time="2025-07-14T23:13:31.467759367Z" level=info msg="RemovePodSandbox for \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\"" Jul 14 23:13:31.468017 env[1247]: time="2025-07-14T23:13:31.467786826Z" level=info msg="Forcibly stopping sandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\"" Jul 14 23:13:31.527935 env[1247]: time="2025-07-14T23:13:31.527903322Z" level=info msg="CreateContainer within sandbox \"b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 14 23:13:31.562735 env[1247]: time="2025-07-14T23:13:31.562706521Z" level=info msg="CreateContainer within sandbox \"afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 14 23:13:31.569713 env[1247]: time="2025-07-14T23:13:31.569690099Z" level=info msg="CreateContainer within sandbox \"b79e5b5e0005d6c9be94f838b600e2648f2b2b39abde880d3645502aafb2934a\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"bbc81024144fad3b13550f07a396af3f2380da5ba523d5969e7dbd221c59395f\"" Jul 14 23:13:31.593420 env[1247]: time="2025-07-14T23:13:31.593344604Z" level=info msg="CreateContainer within sandbox \"afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"878db5c7aa0ab78646e1e9d9e4da99fac1768a68f52b20e8e895f62061df97f6\"" Jul 14 23:13:31.678764 env[1247]: time="2025-07-14T23:13:31.678525147Z" level=info msg="StartContainer for \"bbc81024144fad3b13550f07a396af3f2380da5ba523d5969e7dbd221c59395f\"" Jul 14 23:13:31.679035 env[1247]: time="2025-07-14T23:13:31.679018827Z" level=info msg="StartContainer for \"878db5c7aa0ab78646e1e9d9e4da99fac1768a68f52b20e8e895f62061df97f6\"" Jul 14 23:13:31.734080 kubelet[2110]: E0714 23:13:31.601711 2110 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="18.662s" Jul 14 23:13:31.788841 systemd[1]: Started cri-containerd-878db5c7aa0ab78646e1e9d9e4da99fac1768a68f52b20e8e895f62061df97f6.scope. Jul 14 23:13:31.879607 kernel: audit: type=1400 audit(1752534811.810:1436): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.900673 kernel: audit: type=1400 audit(1752534811.810:1437): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.900765 kernel: audit: type=1400 audit(1752534811.810:1438): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.900793 kernel: audit: type=1400 audit(1752534811.810:1439): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.908288 kernel: audit: type=1400 audit(1752534811.810:1440): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.908331 kernel: audit: type=1400 audit(1752534811.810:1441): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.908354 kernel: audit: type=1400 audit(1752534811.810:1442): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.913140 kernel: audit: type=1400 audit(1752534811.810:1443): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.913175 kernel: audit: type=1400 audit(1752534811.810:1444): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.913192 kernel: audit: type=1400 audit(1752534811.810:1445): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.810000 audit: BPF prog-id=221 op=LOAD Jul 14 23:13:31.816000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.816000 audit[4870]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4540 pid=4870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:31.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262633831303234313434666164336231333535306630376133393661 Jul 14 23:13:31.816000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.816000 audit[4870]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4540 pid=4870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:31.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262633831303234313434666164336231333535306630376133393661 Jul 14 23:13:31.816000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.816000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.816000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.816000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.816000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.816000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.816000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.816000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.816000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.816000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.816000 audit: BPF prog-id=222 op=LOAD Jul 14 23:13:31.816000 audit[4870]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00033a950 items=0 ppid=4540 pid=4870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:31.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262633831303234313434666164336231333535306630376133393661 Jul 14 23:13:31.822000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.822000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.822000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.822000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.822000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.822000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.822000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.822000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.822000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.822000 audit: BPF prog-id=223 op=LOAD Jul 14 23:13:31.822000 audit[4870]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00033a998 items=0 ppid=4540 pid=4870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:31.822000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262633831303234313434666164336231333535306630376133393661 Jul 14 23:13:31.835000 audit: BPF prog-id=223 op=UNLOAD Jul 14 23:13:31.835000 audit: BPF prog-id=222 op=UNLOAD Jul 14 23:13:31.835000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.835000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.835000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.835000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.835000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.835000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.835000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.835000 audit[4870]: AVC avc: denied { perfmon } for pid=4870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.835000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.835000 audit[4870]: AVC avc: denied { bpf } for pid=4870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.835000 audit: BPF prog-id=224 op=LOAD Jul 14 23:13:31.835000 audit[4870]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00033ada8 items=0 ppid=4540 pid=4870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:31.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262633831303234313434666164336231333535306630376133393661 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f2b8e8d5368 items=0 ppid=4431 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:31.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837386462356337616130616237383634366531653964396534646139 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit: BPF prog-id=225 op=LOAD Jul 14 23:13:31.841000 audit[4871]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00038cb08 items=0 ppid=4431 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:31.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837386462356337616130616237383634366531653964396534646139 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit: BPF prog-id=226 op=LOAD Jul 14 23:13:31.841000 audit[4871]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00038cb58 items=0 ppid=4431 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:31.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837386462356337616130616237383634366531653964396534646139 Jul 14 23:13:31.841000 audit: BPF prog-id=226 op=UNLOAD Jul 14 23:13:31.841000 audit: BPF prog-id=225 op=UNLOAD Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:31.841000 audit: BPF prog-id=227 op=LOAD Jul 14 23:13:31.841000 audit[4871]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00038cbe8 items=0 ppid=4431 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:31.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837386462356337616130616237383634366531653964396534646139 Jul 14 23:13:32.111277 env[1247]: time="2025-07-14T23:13:31.879583441Z" level=info msg="StartContainer for \"878db5c7aa0ab78646e1e9d9e4da99fac1768a68f52b20e8e895f62061df97f6\" returns successfully" Jul 14 23:13:32.111277 env[1247]: time="2025-07-14T23:13:31.880370266Z" level=info msg="StartContainer for \"bbc81024144fad3b13550f07a396af3f2380da5ba523d5969e7dbd221c59395f\" returns successfully" Jul 14 23:13:31.789613 systemd[1]: Started cri-containerd-bbc81024144fad3b13550f07a396af3f2380da5ba523d5969e7dbd221c59395f.scope. Jul 14 23:13:32.571149 systemd[1]: run-containerd-runc-k8s.io-878db5c7aa0ab78646e1e9d9e4da99fac1768a68f52b20e8e895f62061df97f6-runc.3Iadhb.mount: Deactivated successfully. Jul 14 23:13:33.163274 env[1247]: time="2025-07-14T23:13:33.163153949Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 14 23:13:34.242015 env[1247]: 2025-07-14 23:13:33.091 [WARNING][4851] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--2z774-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"90c22131-18df-4c3c-beb0-cd3387b6f0f1", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dd0de3d5810543fc35354952c2eeb36f79c13c5f464e4c6e942c7d9abcd8cf34", Pod:"coredns-674b8bbfcf-2z774", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali02ef2e2549a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:34.242015 env[1247]: 2025-07-14 23:13:33.122 [INFO][4851] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:13:34.242015 env[1247]: 2025-07-14 23:13:33.122 [INFO][4851] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" iface="eth0" netns="" Jul 14 23:13:34.242015 env[1247]: 2025-07-14 23:13:33.123 [INFO][4851] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:13:34.242015 env[1247]: 2025-07-14 23:13:33.123 [INFO][4851] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:13:34.242015 env[1247]: 2025-07-14 23:13:34.051 [INFO][4926] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" HandleID="k8s-pod-network.92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Workload="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:13:34.242015 env[1247]: 2025-07-14 23:13:34.077 [INFO][4926] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:34.242015 env[1247]: 2025-07-14 23:13:34.077 [INFO][4926] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:34.242015 env[1247]: 2025-07-14 23:13:34.175 [WARNING][4926] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" HandleID="k8s-pod-network.92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Workload="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:13:34.242015 env[1247]: 2025-07-14 23:13:34.175 [INFO][4926] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" HandleID="k8s-pod-network.92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Workload="localhost-k8s-coredns--674b8bbfcf--2z774-eth0" Jul 14 23:13:34.242015 env[1247]: 2025-07-14 23:13:34.176 [INFO][4926] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:34.242015 env[1247]: 2025-07-14 23:13:34.199 [INFO][4851] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121" Jul 14 23:13:34.242015 env[1247]: time="2025-07-14T23:13:34.241874817Z" level=info msg="TearDown network for sandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\" successfully" Jul 14 23:13:34.309446 env[1247]: time="2025-07-14T23:13:34.273422090Z" level=info msg="RemovePodSandbox \"92b7d1e689c0f63c49f5b891cf946314c397b0f666e02e0c3974d6ec1efb6121\" returns successfully" Jul 14 23:13:34.591587 env[1247]: time="2025-07-14T23:13:34.591553071Z" level=info msg="StopPodSandbox for \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\"" Jul 14 23:13:34.899098 kubelet[2110]: E0714 23:13:34.662710 2110 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.803s" Jul 14 23:13:35.164158 env[1247]: time="2025-07-14T23:13:35.163927790Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:35.174583 env[1247]: time="2025-07-14T23:13:35.174563070Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:35.177095 env[1247]: time="2025-07-14T23:13:35.177076173Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:35.180767 env[1247]: time="2025-07-14T23:13:35.180735701Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:35.181100 env[1247]: time="2025-07-14T23:13:35.181082917Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 14 23:13:37.462932 env[1247]: 2025-07-14 23:13:35.844 [WARNING][4942] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5945579587--t5992-eth0", GenerateName:"calico-apiserver-5945579587-", Namespace:"calico-apiserver", SelfLink:"", UID:"7feea4cf-3784-4958-94d9-d27a301767bf", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5945579587", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7", Pod:"calico-apiserver-5945579587-t5992", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaedfff3e95c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:37.462932 env[1247]: 2025-07-14 23:13:35.976 [INFO][4942] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:13:37.462932 env[1247]: 2025-07-14 23:13:35.977 [INFO][4942] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" iface="eth0" netns="" Jul 14 23:13:37.462932 env[1247]: 2025-07-14 23:13:35.988 [INFO][4942] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:13:37.462932 env[1247]: 2025-07-14 23:13:35.988 [INFO][4942] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:13:37.462932 env[1247]: 2025-07-14 23:13:37.293 [INFO][4951] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" HandleID="k8s-pod-network.f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Workload="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:13:37.462932 env[1247]: 2025-07-14 23:13:37.302 [INFO][4951] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:37.462932 env[1247]: 2025-07-14 23:13:37.303 [INFO][4951] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:37.462932 env[1247]: 2025-07-14 23:13:37.363 [WARNING][4951] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" HandleID="k8s-pod-network.f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Workload="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:13:37.462932 env[1247]: 2025-07-14 23:13:37.363 [INFO][4951] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" HandleID="k8s-pod-network.f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Workload="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:13:37.462932 env[1247]: 2025-07-14 23:13:37.364 [INFO][4951] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:37.462932 env[1247]: 2025-07-14 23:13:37.407 [INFO][4942] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:13:37.570660 env[1247]: time="2025-07-14T23:13:37.465794042Z" level=info msg="TearDown network for sandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\" successfully" Jul 14 23:13:37.570660 env[1247]: time="2025-07-14T23:13:37.465815273Z" level=info msg="StopPodSandbox for \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\" returns successfully" Jul 14 23:13:37.740593 env[1247]: time="2025-07-14T23:13:37.740390570Z" level=info msg="RemovePodSandbox for \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\"" Jul 14 23:13:37.740968 env[1247]: time="2025-07-14T23:13:37.740795488Z" level=info msg="Forcibly stopping sandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\"" Jul 14 23:13:38.467614 kubelet[2110]: E0714 23:13:38.395046 2110 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.708s" Jul 14 23:13:39.530447 env[1247]: 2025-07-14 23:13:38.362 [WARNING][4987] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5945579587--t5992-eth0", GenerateName:"calico-apiserver-5945579587-", Namespace:"calico-apiserver", SelfLink:"", UID:"7feea4cf-3784-4958-94d9-d27a301767bf", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5945579587", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b0164c838c4874cc9c235941024e55ac602572a0f09dc8836f302e3afe653ad7", Pod:"calico-apiserver-5945579587-t5992", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaedfff3e95c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:39.530447 env[1247]: 2025-07-14 23:13:38.372 [INFO][4987] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:13:39.530447 env[1247]: 2025-07-14 23:13:38.372 [INFO][4987] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" iface="eth0" netns="" Jul 14 23:13:39.530447 env[1247]: 2025-07-14 23:13:38.372 [INFO][4987] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:13:39.530447 env[1247]: 2025-07-14 23:13:38.372 [INFO][4987] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:13:39.530447 env[1247]: 2025-07-14 23:13:39.320 [INFO][4994] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" HandleID="k8s-pod-network.f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Workload="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:13:39.530447 env[1247]: 2025-07-14 23:13:39.335 [INFO][4994] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:39.530447 env[1247]: 2025-07-14 23:13:39.336 [INFO][4994] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:39.530447 env[1247]: 2025-07-14 23:13:39.474 [WARNING][4994] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" HandleID="k8s-pod-network.f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Workload="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:13:39.530447 env[1247]: 2025-07-14 23:13:39.475 [INFO][4994] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" HandleID="k8s-pod-network.f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Workload="localhost-k8s-calico--apiserver--5945579587--t5992-eth0" Jul 14 23:13:39.530447 env[1247]: 2025-07-14 23:13:39.476 [INFO][4994] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:39.530447 env[1247]: 2025-07-14 23:13:39.500 [INFO][4987] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8" Jul 14 23:13:39.530447 env[1247]: time="2025-07-14T23:13:39.529901344Z" level=info msg="TearDown network for sandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\" successfully" Jul 14 23:13:39.625528 env[1247]: time="2025-07-14T23:13:39.547575095Z" level=info msg="RemovePodSandbox \"f983f3e34b959c5c70255ca73e8c36a1bebc53080b6511cab39123b2750afbd8\" returns successfully" Jul 14 23:13:39.757015 env[1247]: time="2025-07-14T23:13:39.756870345Z" level=info msg="CreateContainer within sandbox \"afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 14 23:13:39.850300 env[1247]: time="2025-07-14T23:13:39.850259530Z" level=info msg="CreateContainer within sandbox \"afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"bff814f71f1a6b5c5a90d0bba8cd2a93a3e448d229ccd754e32113d461770c43\"" Jul 14 23:13:40.015620 env[1247]: time="2025-07-14T23:13:40.015503242Z" level=info msg="StopPodSandbox for \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\"" Jul 14 23:13:40.435037 env[1247]: time="2025-07-14T23:13:40.434985611Z" level=info msg="StartContainer for \"bff814f71f1a6b5c5a90d0bba8cd2a93a3e448d229ccd754e32113d461770c43\"" Jul 14 23:13:40.496629 systemd[1]: run-containerd-runc-k8s.io-bff814f71f1a6b5c5a90d0bba8cd2a93a3e448d229ccd754e32113d461770c43-runc.gmYwNI.mount: Deactivated successfully. Jul 14 23:13:40.665818 kernel: kauditd_printk_skb: 90 callbacks suppressed Jul 14 23:13:40.732017 kernel: audit: type=1400 audit(1752534820.615:1460): avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.784999 kernel: audit: type=1300 audit(1752534820.615:1460): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f606fc29ed8 items=0 ppid=4431 pid=5022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:40.785053 kernel: audit: type=1327 audit(1752534820.615:1460): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266663831346637316631613662356335613930643062626138636432 Jul 14 23:13:40.793572 kernel: audit: type=1400 audit(1752534820.616:1461): avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.816068 kernel: audit: type=1400 audit(1752534820.616:1461): avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.816097 kernel: audit: type=1400 audit(1752534820.616:1461): avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.831836 kernel: audit: type=1400 audit(1752534820.616:1461): avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.843148 kernel: audit: type=1400 audit(1752534820.616:1461): avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.843181 kernel: audit: type=1400 audit(1752534820.616:1461): avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.843199 kernel: audit: type=1400 audit(1752534820.616:1461): avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.615000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.615000 audit[5022]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f606fc29ed8 items=0 ppid=4431 pid=5022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:40.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266663831346637316631613662356335613930643062626138636432 Jul 14 23:13:40.616000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.616000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.616000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.616000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.616000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.616000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.616000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.616000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.616000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.616000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.616000 audit: BPF prog-id=228 op=LOAD Jul 14 23:13:40.616000 audit[5022]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00039c758 items=0 ppid=4431 pid=5022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:40.616000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266663831346637316631613662356335613930643062626138636432 Jul 14 23:13:40.618000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.618000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.618000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.618000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.618000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.618000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.618000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.618000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.618000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.618000 audit: BPF prog-id=229 op=LOAD Jul 14 23:13:40.618000 audit[5022]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00039c7a8 items=0 ppid=4431 pid=5022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:40.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266663831346637316631613662356335613930643062626138636432 Jul 14 23:13:40.622000 audit: BPF prog-id=229 op=UNLOAD Jul 14 23:13:40.622000 audit: BPF prog-id=228 op=UNLOAD Jul 14 23:13:40.622000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.622000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.622000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.622000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.622000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.622000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.622000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.622000 audit[5022]: AVC avc: denied { perfmon } for pid=5022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.622000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.622000 audit[5022]: AVC avc: denied { bpf } for pid=5022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:40.622000 audit: BPF prog-id=230 op=LOAD Jul 14 23:13:40.622000 audit[5022]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00039c838 items=0 ppid=4431 pid=5022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:40.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266663831346637316631613662356335613930643062626138636432 Jul 14 23:13:40.544115 systemd[1]: Started cri-containerd-bff814f71f1a6b5c5a90d0bba8cd2a93a3e448d229ccd754e32113d461770c43.scope. Jul 14 23:13:41.463851 env[1247]: time="2025-07-14T23:13:40.670803593Z" level=info msg="StartContainer for \"bff814f71f1a6b5c5a90d0bba8cd2a93a3e448d229ccd754e32113d461770c43\" returns successfully" Jul 14 23:13:46.075902 env[1247]: 2025-07-14 23:13:44.237 [WARNING][5010] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"e7202260-029d-49c9-8ec8-f068238e9e8b", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f", Pod:"coredns-674b8bbfcf-kzc7l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2504f237612", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:46.075902 env[1247]: 2025-07-14 23:13:44.348 [INFO][5010] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:13:46.075902 env[1247]: 2025-07-14 23:13:44.350 [INFO][5010] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" iface="eth0" netns="" Jul 14 23:13:46.075902 env[1247]: 2025-07-14 23:13:44.352 [INFO][5010] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:13:46.075902 env[1247]: 2025-07-14 23:13:44.352 [INFO][5010] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:13:46.075902 env[1247]: 2025-07-14 23:13:45.596 [INFO][5057] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" HandleID="k8s-pod-network.e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Workload="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:13:46.075902 env[1247]: 2025-07-14 23:13:45.622 [INFO][5057] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:46.075902 env[1247]: 2025-07-14 23:13:45.630 [INFO][5057] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:46.075902 env[1247]: 2025-07-14 23:13:45.840 [WARNING][5057] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" HandleID="k8s-pod-network.e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Workload="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:13:46.075902 env[1247]: 2025-07-14 23:13:45.841 [INFO][5057] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" HandleID="k8s-pod-network.e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Workload="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:13:46.075902 env[1247]: 2025-07-14 23:13:45.848 [INFO][5057] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:46.075902 env[1247]: 2025-07-14 23:13:45.979 [INFO][5010] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:13:46.075902 env[1247]: time="2025-07-14T23:13:46.063781844Z" level=info msg="TearDown network for sandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\" successfully" Jul 14 23:13:46.075902 env[1247]: time="2025-07-14T23:13:46.063812959Z" level=info msg="StopPodSandbox for \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\" returns successfully" Jul 14 23:13:46.587999 systemd[1]: Started sshd@8-139.178.70.104:22-139.178.89.65:48956.service. Jul 14 23:13:46.630085 kernel: kauditd_printk_skb: 33 callbacks suppressed Jul 14 23:13:46.634214 kernel: audit: type=1130 audit(1752534826.593:1466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.104:22-139.178.89.65:48956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:13:46.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.104:22-139.178.89.65:48956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:13:47.513000 audit[5064]: USER_ACCT pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:47.683425 kernel: audit: type=1101 audit(1752534827.513:1467): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:47.688979 kernel: audit: type=1103 audit(1752534827.523:1468): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:47.693623 kernel: audit: type=1006 audit(1752534827.523:1469): pid=5064 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 14 23:13:47.697633 kernel: audit: type=1300 audit(1752534827.523:1469): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0ab7dbe0 a2=3 a3=0 items=0 ppid=1 pid=5064 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:47.697671 kernel: audit: type=1327 audit(1752534827.523:1469): proctitle=737368643A20636F7265205B707269765D Jul 14 23:13:47.523000 audit[5064]: CRED_ACQ pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:47.523000 audit[5064]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0ab7dbe0 a2=3 a3=0 items=0 ppid=1 pid=5064 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:47.523000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:13:47.553568 sshd[5064]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:13:47.744052 sshd[5064]: Accepted publickey for core from 139.178.89.65 port 48956 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:13:47.860727 systemd-logind[1235]: New session 10 of user core. Jul 14 23:13:47.868497 systemd[1]: Started session-10.scope. Jul 14 23:13:47.878000 audit[5064]: USER_START pid=5064 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:47.886519 kernel: audit: type=1105 audit(1752534827.878:1470): pid=5064 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:47.889000 audit[5070]: CRED_ACQ pid=5070 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:47.894774 kernel: audit: type=1103 audit(1752534827.889:1471): pid=5070 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:52.698000 audit[4168]: AVC avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:13:53.234670 kernel: audit: type=1400 audit(1752534832.698:1472): avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:13:53.354287 kernel: audit: type=1300 audit(1752534832.698:1472): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0029f1060 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:13:53.384914 kernel: audit: type=1327 audit(1752534832.698:1472): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:13:52.698000 audit[4168]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0029f1060 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:13:52.698000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:13:55.427000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:55.780591 kernel: audit: type=1400 audit(1752534835.427:1473): avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:55.802031 kernel: audit: type=1300 audit(1752534835.427:1473): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0015f2c20 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:13:55.804630 kernel: audit: type=1327 audit(1752534835.427:1473): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:55.807845 kernel: audit: type=1400 audit(1752534835.431:1474): avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:55.807906 kernel: audit: type=1300 audit(1752534835.431:1474): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002142ae0 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:13:55.807970 kernel: audit: type=1327 audit(1752534835.431:1474): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:55.807993 kernel: audit: type=1400 audit(1752534835.784:1475): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:55.427000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0015f2c20 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:13:55.427000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:55.431000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:55.431000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002142ae0 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:13:55.431000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:55.784000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:55.784000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c013769590 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:13:55.784000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:13:55.799000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:55.799000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c00a7d8d00 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:13:55.799000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:13:55.845000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:55.845000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c0102a00f0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:13:55.845000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:13:55.845000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:55.845000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c00a7d8d20 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:13:55.845000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:13:56.031000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:56.031000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c0102a01b0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:13:56.031000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:13:56.115000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:56.115000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c013769890 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:13:56.115000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:13:56.893000 audit[4352]: AVC avc: denied { watch } for pid=4352 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.1792147082/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c468,c664 tclass=file permissive=0 Jul 14 23:13:56.893000 audit[4352]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001b83640 a2=fc6 a3=0 items=0 ppid=4296 pid=4352 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 key=(null) Jul 14 23:13:56.893000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:14:03.885000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:04.249297 kernel: kauditd_printk_skb: 20 callbacks suppressed Jul 14 23:14:04.282781 kernel: audit: type=1400 audit(1752534843.885:1482): avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:04.285349 kernel: audit: type=1300 audit(1752534843.885:1482): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0015f2fc0 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:14:04.285395 kernel: audit: type=1327 audit(1752534843.885:1482): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:04.287696 kernel: audit: type=1400 audit(1752534843.965:1483): avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:04.287775 kernel: audit: type=1300 audit(1752534843.965:1483): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c002cb25a0 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:14:04.289308 kernel: audit: type=1327 audit(1752534843.965:1483): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:04.289337 kernel: audit: type=1400 audit(1752534843.995:1484): avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:04.290443 kernel: audit: type=1300 audit(1752534843.995:1484): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0015f3140 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:14:04.290491 kernel: audit: type=1327 audit(1752534843.995:1484): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:04.290509 kernel: audit: type=1400 audit(1752534844.110:1485): avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:03.885000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0015f2fc0 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:14:03.885000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:03.965000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:03.965000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c002cb25a0 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:14:03.965000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:03.995000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:03.995000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0015f3140 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:14:03.995000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:04.110000 audit[1949]: AVC avc: denied { watch } for pid=1949 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:04.110000 audit[1949]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002cb2780 a2=fc6 a3=0 items=0 ppid=1794 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:14:04.110000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:41.738858 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 23:14:42.653438 kernel: audit: type=1325 audit(1752534881.695:1486): table=filter:124 family=2 entries=11 op=nft_register_rule pid=5116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:42.719842 kernel: audit: type=1300 audit(1752534881.695:1486): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff8a1adbc0 a2=0 a3=7fff8a1adbac items=0 ppid=2217 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:42.728630 kernel: audit: type=1327 audit(1752534881.695:1486): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:42.734979 kernel: audit: type=1325 audit(1752534881.770:1487): table=nat:125 family=2 entries=29 op=nft_unregister_chain pid=5116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:42.741322 kernel: audit: type=1300 audit(1752534881.770:1487): arch=c000003e syscall=46 success=yes exit=6796 a0=3 a1=7fff8a1adbc0 a2=0 a3=7fff8a1adbac items=0 ppid=2217 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:42.741365 kernel: audit: type=1327 audit(1752534881.770:1487): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:41.695000 audit[5116]: NETFILTER_CFG table=filter:124 family=2 entries=11 op=nft_register_rule pid=5116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:41.695000 audit[5116]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff8a1adbc0 a2=0 a3=7fff8a1adbac items=0 ppid=2217 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:41.695000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:41.770000 audit[5116]: NETFILTER_CFG table=nat:125 family=2 entries=29 op=nft_unregister_chain pid=5116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:41.770000 audit[5116]: SYSCALL arch=c000003e syscall=46 success=yes exit=6796 a0=3 a1=7fff8a1adbc0 a2=0 a3=7fff8a1adbac items=0 ppid=2217 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:41.770000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:43.598960 systemd[1]: Started sshd@9-139.178.70.104:22-185.255.90.238:33394.service. Jul 14 23:14:43.860351 kernel: audit: type=1130 audit(1752534883.611:1488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.104:22-185.255.90.238:33394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:14:43.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.104:22-185.255.90.238:33394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:14:45.849984 sshd[5118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.255.90.238 user=root Jul 14 23:14:46.069878 kernel: audit: type=1100 audit(1752534885.869:1489): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.255.90.238 addr=185.255.90.238 terminal=ssh res=failed' Jul 14 23:14:45.869000 audit[5118]: USER_AUTH pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.255.90.238 addr=185.255.90.238 terminal=ssh res=failed' Jul 14 23:14:47.805170 sshd[5118]: Failed password for root from 185.255.90.238 port 33394 ssh2 Jul 14 23:14:48.694811 sshd[5118]: Received disconnect from 185.255.90.238 port 33394:11: Bye Bye [preauth] Jul 14 23:14:48.694811 sshd[5118]: Disconnected from authenticating user root 185.255.90.238 port 33394 [preauth] Jul 14 23:14:49.157264 systemd[1]: sshd@9-139.178.70.104:22-185.255.90.238:33394.service: Deactivated successfully. Jul 14 23:14:49.298961 kernel: audit: type=1131 audit(1752534889.220:1490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.104:22-185.255.90.238:33394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:14:49.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.104:22-185.255.90.238:33394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:14:50.719575 systemd[1]: cri-containerd-ff9dd5d6be471e5400946bc9807d009656848f808451d06da60e9fbd585a5324.scope: Deactivated successfully. Jul 14 23:14:51.016452 kernel: audit: type=1334 audit(1752534890.730:1491): prog-id=81 op=UNLOAD Jul 14 23:14:51.026833 kernel: audit: type=1334 audit(1752534890.734:1492): prog-id=102 op=UNLOAD Jul 14 23:14:50.730000 audit: BPF prog-id=81 op=UNLOAD Jul 14 23:14:50.734000 audit: BPF prog-id=102 op=UNLOAD Jul 14 23:14:51.047701 env[1247]: time="2025-07-14T23:14:50.781958957Z" level=info msg="shim disconnected" id=ff9dd5d6be471e5400946bc9807d009656848f808451d06da60e9fbd585a5324 Jul 14 23:14:51.047701 env[1247]: time="2025-07-14T23:14:50.781995170Z" level=warning msg="cleaning up after shim disconnected" id=ff9dd5d6be471e5400946bc9807d009656848f808451d06da60e9fbd585a5324 namespace=k8s.io Jul 14 23:14:51.047701 env[1247]: time="2025-07-14T23:14:50.782001362Z" level=info msg="cleaning up dead shim" Jul 14 23:14:51.047701 env[1247]: time="2025-07-14T23:14:50.817301513Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:14:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5133 runtime=io.containerd.runc.v2\n" Jul 14 23:14:50.735566 systemd[1]: cri-containerd-ff9dd5d6be471e5400946bc9807d009656848f808451d06da60e9fbd585a5324.scope: Consumed 1.633s CPU time. Jul 14 23:14:50.860891 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ff9dd5d6be471e5400946bc9807d009656848f808451d06da60e9fbd585a5324-rootfs.mount: Deactivated successfully. Jul 14 23:14:52.961000 audit[4168]: AVC avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:14:53.508218 kernel: audit: type=1400 audit(1752534892.961:1493): avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:14:53.599275 kernel: audit: type=1300 audit(1752534892.961:1493): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0029f1220 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:14:53.615805 kernel: audit: type=1327 audit(1752534892.961:1493): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:14:52.961000 audit[4168]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0029f1220 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:14:52.961000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:14:54.634654 systemd[1]: cri-containerd-8e19483e70f734639e6e7a5048be3f1892b1090d87f01c70617ef8704aa90ad4.scope: Deactivated successfully. Jul 14 23:14:55.035037 kernel: audit: type=1334 audit(1752534894.660:1494): prog-id=73 op=UNLOAD Jul 14 23:14:55.068205 kernel: audit: type=1334 audit(1752534894.667:1495): prog-id=84 op=UNLOAD Jul 14 23:14:54.660000 audit: BPF prog-id=73 op=UNLOAD Jul 14 23:14:54.667000 audit: BPF prog-id=84 op=UNLOAD Jul 14 23:14:55.120886 env[1247]: time="2025-07-14T23:14:54.876278305Z" level=info msg="shim disconnected" id=8e19483e70f734639e6e7a5048be3f1892b1090d87f01c70617ef8704aa90ad4 Jul 14 23:14:55.120886 env[1247]: time="2025-07-14T23:14:54.876306159Z" level=warning msg="cleaning up after shim disconnected" id=8e19483e70f734639e6e7a5048be3f1892b1090d87f01c70617ef8704aa90ad4 namespace=k8s.io Jul 14 23:14:55.120886 env[1247]: time="2025-07-14T23:14:54.876313026Z" level=info msg="cleaning up dead shim" Jul 14 23:14:55.120886 env[1247]: time="2025-07-14T23:14:54.881801833Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:14:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5159 runtime=io.containerd.runc.v2\n" Jul 14 23:14:54.668151 systemd[1]: cri-containerd-8e19483e70f734639e6e7a5048be3f1892b1090d87f01c70617ef8704aa90ad4.scope: Consumed 2.774s CPU time. Jul 14 23:14:54.980381 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8e19483e70f734639e6e7a5048be3f1892b1090d87f01c70617ef8704aa90ad4-rootfs.mount: Deactivated successfully. Jul 14 23:14:55.859000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:55.894499 kernel: audit: type=1400 audit(1752534895.859:1496): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:55.894589 kernel: audit: type=1300 audit(1752534895.859:1496): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00a09e6a0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:14:55.897444 kernel: audit: type=1327 audit(1752534895.859:1496): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:55.859000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00a09e6a0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:14:55.977448 kernel: audit: type=1400 audit(1752534895.939:1497): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:55.977509 kernel: audit: type=1300 audit(1752534895.939:1497): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00aa25620 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:14:55.977530 kernel: audit: type=1327 audit(1752534895.939:1497): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:55.859000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:55.939000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:55.939000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00aa25620 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:14:55.939000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:56.108000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.113765 kernel: audit: type=1400 audit(1752534896.108:1498): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.108000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00d3e7d10 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:14:56.108000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:56.121772 kernel: audit: type=1300 audit(1752534896.108:1498): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00d3e7d10 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:14:56.134000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.134000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00d3e7e90 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:14:56.134000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:56.136000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.136000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c00aa25980 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:14:56.136000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:56.170000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.170000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00a09eac0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:14:56.170000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:57.362000 audit[4352]: AVC avc: denied { watch } for pid=4352 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.1792147082/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c468,c664 tclass=file permissive=0 Jul 14 23:14:57.362000 audit[4352]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002148260 a2=fc6 a3=0 items=0 ppid=4296 pid=4352 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 key=(null) Jul 14 23:14:57.362000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:15:14.157485 kubelet[2110]: W0714 23:15:13.668609 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@9-139.178.70.104:22-185.255.90.238:33394.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@9-139.178.70.104:22-185.255.90.238:33394.service: no such file or directory Jul 14 23:15:14.286205 env[1247]: time="2025-07-14T23:15:14.286150865Z" level=info msg="RemovePodSandbox for \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\"" Jul 14 23:15:14.286205 env[1247]: time="2025-07-14T23:15:14.286178805Z" level=info msg="Forcibly stopping sandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\"" Jul 14 23:15:19.917912 env[1247]: 2025-07-14 23:15:18.042 [WARNING][5247] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"e7202260-029d-49c9-8ec8-f068238e9e8b", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"81c996e6912db5a329b8d49946e6d2d560c3226ce67f95929caecadd9dc4236f", Pod:"coredns-674b8bbfcf-kzc7l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2504f237612", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:15:19.917912 env[1247]: 2025-07-14 23:15:18.115 [INFO][5247] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:15:19.917912 env[1247]: 2025-07-14 23:15:18.117 [INFO][5247] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" iface="eth0" netns="" Jul 14 23:15:19.917912 env[1247]: 2025-07-14 23:15:18.119 [INFO][5247] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:15:19.917912 env[1247]: 2025-07-14 23:15:18.119 [INFO][5247] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:15:19.917912 env[1247]: 2025-07-14 23:15:19.551 [INFO][5306] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" HandleID="k8s-pod-network.e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Workload="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:15:19.917912 env[1247]: 2025-07-14 23:15:19.567 [INFO][5306] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:15:19.917912 env[1247]: 2025-07-14 23:15:19.568 [INFO][5306] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:15:19.917912 env[1247]: 2025-07-14 23:15:19.835 [WARNING][5306] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" HandleID="k8s-pod-network.e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Workload="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:15:19.917912 env[1247]: 2025-07-14 23:15:19.842 [INFO][5306] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" HandleID="k8s-pod-network.e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Workload="localhost-k8s-coredns--674b8bbfcf--kzc7l-eth0" Jul 14 23:15:19.917912 env[1247]: 2025-07-14 23:15:19.853 [INFO][5306] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:15:19.917912 env[1247]: 2025-07-14 23:15:19.879 [INFO][5247] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708" Jul 14 23:15:19.917912 env[1247]: time="2025-07-14T23:15:19.911469169Z" level=info msg="TearDown network for sandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\" successfully" Jul 14 23:15:20.045161 env[1247]: time="2025-07-14T23:15:19.939060279Z" level=info msg="RemovePodSandbox \"e08f446883e8b6e314aacd7e43d9a5a493081ff98e6db4a57ab168e90d02a708\" returns successfully" Jul 14 23:15:23.101026 kubelet[2110]: E0714 23:15:20.268162 2110 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1m35.287s" Jul 14 23:15:23.184862 kubelet[2110]: I0714 23:15:23.163446 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-backend-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.184862 kubelet[2110]: I0714 23:15:23.163485 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"node-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.184862 kubelet[2110]: I0714 23:15:23.174482 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.217837 kubelet[2110]: I0714 23:15:23.217803 2110 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.220210 kubelet[2110]: I0714 23:15:23.220185 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"coredns\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.288608 kubelet[2110]: I0714 23:15:23.288573 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"typha-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.378939 kubelet[2110]: I0714 23:15:23.378872 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.380974 kubelet[2110]: I0714 23:15:23.379039 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"tigera-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.537664 kubelet[2110]: I0714 23:15:23.537638 2110 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.692480 kubelet[2110]: I0714 23:15:23.691937 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"cni-config\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.705679 kubelet[2110]: I0714 23:15:23.705356 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.705679 kubelet[2110]: I0714 23:15:23.052089 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.705679 kubelet[2110]: I0714 23:15:23.049204 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.705679 kubelet[2110]: I0714 23:15:23.069808 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"calico-apiserver-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.769090 kubelet[2110]: E0714 23:15:23.758956 2110 kubelet.go:2460] "Skipping pod synchronization" err="container runtime is down" Jul 14 23:15:23.816591 kubelet[2110]: I0714 23:15:23.816559 2110 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.892419 kubelet[2110]: I0714 23:15:23.892390 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.892419 kubelet[2110]: I0714 23:15:23.892420 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kubernetes-services-endpoint\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:23.994857 kubelet[2110]: I0714 23:15:23.994781 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-proxy\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:24.047416 kubelet[2110]: I0714 23:15:24.047393 2110 reflector.go:556] "Warning: watch ended with error" reflector="pkg/kubelet/config/apiserver.go:66" type="*v1.Pod" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:24.047573 kubelet[2110]: I0714 23:15:24.047553 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:24.097897 kubelet[2110]: I0714 23:15:24.097870 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:24.146887 kubelet[2110]: I0714 23:15:24.146852 2110 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:15:24.162476 kubelet[2110]: E0714 23:15:24.162447 2110 kubelet.go:2460] "Skipping pod synchronization" err="container runtime is down" Jul 14 23:15:24.379619 kubelet[2110]: E0714 23:15:24.379586 2110 kubelet.go:2460] "Skipping pod synchronization" err="container runtime is down" Jul 14 23:15:31.124565 kubelet[2110]: E0714 23:15:24.989173 2110 controller.go:195] "Failed to update lease" err="Put \"https://139.178.70.104:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": context deadline exceeded" Jul 14 23:15:31.259996 env[1247]: time="2025-07-14T23:15:31.127635728Z" level=info msg="StopPodSandbox for \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\"" Jul 14 23:15:31.266096 systemd[1]: run-containerd-runc-k8s.io-546ce2ce3dcf54230cf3d7886316a79c2cc9a23a07ab2f84d7984d45e2453014-runc.zxhkDd.mount: Deactivated successfully. Jul 14 23:15:35.326265 env[1247]: 2025-07-14 23:15:33.975 [WARNING][5384] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--f8fg8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c6c195e3-b7bd-48dc-b09c-98461d031cf2", ResourceVersion:"1040", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057", Pod:"csi-node-driver-f8fg8", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali445cc79266b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:15:35.326265 env[1247]: 2025-07-14 23:15:34.051 [INFO][5384] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:15:35.326265 env[1247]: 2025-07-14 23:15:34.052 [INFO][5384] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" iface="eth0" netns="" Jul 14 23:15:35.326265 env[1247]: 2025-07-14 23:15:34.053 [INFO][5384] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:15:35.326265 env[1247]: 2025-07-14 23:15:34.055 [INFO][5384] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:15:35.326265 env[1247]: 2025-07-14 23:15:35.145 [INFO][5418] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" HandleID="k8s-pod-network.dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Workload="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:15:35.326265 env[1247]: 2025-07-14 23:15:35.163 [INFO][5418] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:15:35.326265 env[1247]: 2025-07-14 23:15:35.164 [INFO][5418] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:15:35.326265 env[1247]: 2025-07-14 23:15:35.272 [WARNING][5418] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" HandleID="k8s-pod-network.dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Workload="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:15:35.326265 env[1247]: 2025-07-14 23:15:35.272 [INFO][5418] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" HandleID="k8s-pod-network.dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Workload="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:15:35.326265 env[1247]: 2025-07-14 23:15:35.273 [INFO][5418] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:15:35.326265 env[1247]: 2025-07-14 23:15:35.295 [INFO][5384] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:15:35.326265 env[1247]: time="2025-07-14T23:15:35.319342122Z" level=info msg="TearDown network for sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\" successfully" Jul 14 23:15:35.326265 env[1247]: time="2025-07-14T23:15:35.319365493Z" level=info msg="StopPodSandbox for \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\" returns successfully" Jul 14 23:15:38.186966 sshd[5064]: pam_unix(sshd:session): session closed for user core Jul 14 23:15:38.306193 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 14 23:15:38.311152 kernel: audit: type=1106 audit(1752534938.257:1503): pid=5064 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:38.314472 kernel: audit: type=1104 audit(1752534938.262:1504): pid=5064 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:38.314529 kernel: audit: type=1131 audit(1752534938.283:1505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.104:22-139.178.89.65:48956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:15:38.257000 audit[5064]: USER_END pid=5064 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:38.262000 audit[5064]: CRED_DISP pid=5064 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:38.283000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.104:22-139.178.89.65:48956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:15:38.278606 systemd[1]: sshd@8-139.178.70.104:22-139.178.89.65:48956.service: Deactivated successfully. Jul 14 23:15:38.284759 systemd[1]: session-10.scope: Deactivated successfully. Jul 14 23:15:38.284847 systemd[1]: session-10.scope: Consumed 7.248s CPU time. Jul 14 23:15:38.288345 systemd-logind[1235]: Session 10 logged out. Waiting for processes to exit. Jul 14 23:15:38.305399 systemd-logind[1235]: Removed session 10. Jul 14 23:15:38.624534 env[1247]: time="2025-07-14T23:15:38.624246185Z" level=info msg="RemovePodSandbox for \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\"" Jul 14 23:15:38.624534 env[1247]: time="2025-07-14T23:15:38.624270872Z" level=info msg="Forcibly stopping sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\"" Jul 14 23:15:42.837896 env[1247]: 2025-07-14 23:15:40.932 [WARNING][5455] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--f8fg8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c6c195e3-b7bd-48dc-b09c-98461d031cf2", ResourceVersion:"1040", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"afd298c3d783f6d59fd85117fa6bb505649f517a3365ab0e47eb3c6897866057", Pod:"csi-node-driver-f8fg8", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali445cc79266b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:15:42.837896 env[1247]: 2025-07-14 23:15:40.977 [INFO][5455] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:15:42.837896 env[1247]: 2025-07-14 23:15:40.979 [INFO][5455] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" iface="eth0" netns="" Jul 14 23:15:42.837896 env[1247]: 2025-07-14 23:15:40.980 [INFO][5455] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:15:42.837896 env[1247]: 2025-07-14 23:15:40.980 [INFO][5455] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:15:42.837896 env[1247]: 2025-07-14 23:15:42.213 [INFO][5466] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" HandleID="k8s-pod-network.dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Workload="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:15:42.837896 env[1247]: 2025-07-14 23:15:42.312 [INFO][5466] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:15:42.837896 env[1247]: 2025-07-14 23:15:42.315 [INFO][5466] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:15:42.837896 env[1247]: 2025-07-14 23:15:42.690 [WARNING][5466] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" HandleID="k8s-pod-network.dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Workload="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:15:42.837896 env[1247]: 2025-07-14 23:15:42.690 [INFO][5466] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" HandleID="k8s-pod-network.dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Workload="localhost-k8s-csi--node--driver--f8fg8-eth0" Jul 14 23:15:42.837896 env[1247]: 2025-07-14 23:15:42.691 [INFO][5466] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:15:42.837896 env[1247]: 2025-07-14 23:15:42.771 [INFO][5455] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676" Jul 14 23:15:42.837896 env[1247]: time="2025-07-14T23:15:42.826876340Z" level=info msg="TearDown network for sandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\" successfully" Jul 14 23:15:43.153295 env[1247]: time="2025-07-14T23:15:42.924058995Z" level=info msg="RemovePodSandbox \"dce1e4ee0e793e82624dd4f8f7c6c2c953df0cc744202b8e29702a805170f676\" returns successfully" Jul 14 23:15:43.374687 systemd[1]: Started sshd@10-139.178.70.104:22-139.178.89.65:57130.service. Jul 14 23:15:43.426498 kernel: audit: type=1130 audit(1752534943.379:1506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.104:22-139.178.89.65:57130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:15:43.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.104:22-139.178.89.65:57130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:15:44.083000 audit[5473]: USER_ACCT pid=5473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:44.116104 kernel: audit: type=1101 audit(1752534944.083:1507): pid=5473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:44.116175 kernel: audit: type=1103 audit(1752534944.089:1508): pid=5473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:44.116197 kernel: audit: type=1006 audit(1752534944.089:1509): pid=5473 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 14 23:15:44.116215 kernel: audit: type=1300 audit(1752534944.089:1509): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcaa93f620 a2=3 a3=0 items=0 ppid=1 pid=5473 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:15:44.116231 kernel: audit: type=1327 audit(1752534944.089:1509): proctitle=737368643A20636F7265205B707269765D Jul 14 23:15:44.089000 audit[5473]: CRED_ACQ pid=5473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:44.089000 audit[5473]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcaa93f620 a2=3 a3=0 items=0 ppid=1 pid=5473 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:15:44.089000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:15:44.159803 sshd[5473]: Accepted publickey for core from 139.178.89.65 port 57130 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:15:44.124153 sshd[5473]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:15:44.285070 systemd-logind[1235]: New session 11 of user core. Jul 14 23:15:44.312170 kernel: audit: type=1105 audit(1752534944.296:1510): pid=5473 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:44.312229 kernel: audit: type=1103 audit(1752534944.301:1511): pid=5475 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:44.296000 audit[5473]: USER_START pid=5473 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:44.301000 audit[5475]: CRED_ACQ pid=5475 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:44.293557 systemd[1]: Started session-11.scope. Jul 14 23:15:53.349000 audit[4168]: AVC avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:15:53.598899 kernel: audit: type=1400 audit(1752534953.349:1512): avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:15:53.607505 kernel: audit: type=1300 audit(1752534953.349:1512): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0029f08c0 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:15:53.607551 kernel: audit: type=1327 audit(1752534953.349:1512): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:15:53.349000 audit[4168]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0029f08c0 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:15:53.349000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:15:55.997000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.090890 kernel: audit: type=1400 audit(1752534955.997:1513): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.097139 kernel: audit: type=1300 audit(1752534955.997:1513): arch=c000003e syscall=254 success=no exit=-13 a0=47 a1=c00a7d81a0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:15:56.099781 kernel: audit: type=1327 audit(1752534955.997:1513): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:55.997000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=47 a1=c00a7d81a0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:15:56.132440 kernel: audit: type=1400 audit(1752534956.118:1514): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.132527 kernel: audit: type=1300 audit(1752534956.118:1514): arch=c000003e syscall=254 success=no exit=-13 a0=47 a1=c0102a17d0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:15:56.132553 kernel: audit: type=1327 audit(1752534956.118:1514): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:55.997000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:56.118000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.118000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=47 a1=c0102a17d0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:15:56.118000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:56.134000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.138767 kernel: audit: type=1400 audit(1752534956.134:1515): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.134000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=47 a1=c00a5719b0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:15:56.134000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:56.142000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.142000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00a571a10 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:15:56.142000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:56.171000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.171000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=47 a1=c00a9064c0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:15:56.171000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:56.190000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.190000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=47 a1=c00a8d8690 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:15:56.190000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:56.621825 kubelet[2110]: E0714 23:15:55.665258 2110 goroutinemap.go:150] Operation for "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock" failed. No retries permitted until 2025-07-14 23:15:39.341823322 +0000 UTC m=+220.818429852 (durationBeforeRetry 500ms). Error: RegisterPlugin error -- dial failed at socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: failed to dial socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: context deadline exceeded Jul 14 23:15:57.508000 audit[4352]: AVC avc: denied { watch } for pid=4352 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.1792147082/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c468,c664 tclass=file permissive=0 Jul 14 23:15:57.508000 audit[4352]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001b82a40 a2=fc6 a3=0 items=0 ppid=4296 pid=4352 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 key=(null) Jul 14 23:15:57.508000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:15:59.845168 systemd[1]: Started sshd@11-139.178.70.104:22-185.255.90.238:59452.service. Jul 14 23:15:59.956830 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 14 23:15:59.962929 kernel: audit: type=1130 audit(1752534959.847:1520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.104:22-185.255.90.238:59452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:15:59.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.104:22-185.255.90.238:59452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:00.590104 env[1247]: time="2025-07-14T23:16:00.589435285Z" level=info msg="StopPodSandbox for \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\"" Jul 14 23:16:01.465000 audit[5508]: USER_AUTH pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.255.90.238 addr=185.255.90.238 terminal=ssh res=failed' Jul 14 23:16:01.497097 kernel: audit: type=1100 audit(1752534961.465:1521): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.255.90.238 addr=185.255.90.238 terminal=ssh res=failed' Jul 14 23:16:01.466527 sshd[5508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.255.90.238 user=root Jul 14 23:16:03.897630 env[1247]: 2025-07-14 23:16:02.368 [WARNING][5570] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0", GenerateName:"calico-kube-controllers-6dfbf78cff-", Namespace:"calico-system", SelfLink:"", UID:"35477ad0-0bd5-4d19-a21c-4649c1795360", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6dfbf78cff", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d", Pod:"calico-kube-controllers-6dfbf78cff-fbjqb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calide6b61bbbf7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:16:03.897630 env[1247]: 2025-07-14 23:16:02.478 [INFO][5570] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:16:03.897630 env[1247]: 2025-07-14 23:16:02.480 [INFO][5570] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" iface="eth0" netns="" Jul 14 23:16:03.897630 env[1247]: 2025-07-14 23:16:02.482 [INFO][5570] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:16:03.897630 env[1247]: 2025-07-14 23:16:02.482 [INFO][5570] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:16:03.897630 env[1247]: 2025-07-14 23:16:03.460 [INFO][5584] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" HandleID="k8s-pod-network.92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Workload="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:16:03.897630 env[1247]: 2025-07-14 23:16:03.504 [INFO][5584] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:16:03.897630 env[1247]: 2025-07-14 23:16:03.511 [INFO][5584] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:16:03.897630 env[1247]: 2025-07-14 23:16:03.771 [WARNING][5584] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" HandleID="k8s-pod-network.92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Workload="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:16:03.897630 env[1247]: 2025-07-14 23:16:03.771 [INFO][5584] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" HandleID="k8s-pod-network.92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Workload="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:16:03.897630 env[1247]: 2025-07-14 23:16:03.772 [INFO][5584] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:16:03.897630 env[1247]: 2025-07-14 23:16:03.788 [INFO][5570] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:16:03.897630 env[1247]: time="2025-07-14T23:16:03.899644659Z" level=info msg="TearDown network for sandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\" successfully" Jul 14 23:16:03.897630 env[1247]: time="2025-07-14T23:16:03.899676333Z" level=info msg="StopPodSandbox for \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\" returns successfully" Jul 14 23:16:04.111736 sshd[5508]: Failed password for root from 185.255.90.238 port 59452 ssh2 Jul 14 23:16:07.061204 sshd[5508]: Received disconnect from 185.255.90.238 port 59452:11: Bye Bye [preauth] Jul 14 23:16:07.061204 sshd[5508]: Disconnected from authenticating user root 185.255.90.238 port 59452 [preauth] Jul 14 23:16:07.108235 systemd[1]: sshd@11-139.178.70.104:22-185.255.90.238:59452.service: Deactivated successfully. Jul 14 23:16:07.168727 kernel: audit: type=1131 audit(1752534967.111:1522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.104:22-185.255.90.238:59452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:07.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.104:22-185.255.90.238:59452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:07.191673 kubelet[2110]: W0714 23:16:05.166176 2110 logging.go:55] [core] [Channel #14 SubChannel #15]grpc: addrConn.createTransport failed to connect to {Addr: "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock", ServerName: "%2Fvar%2Flib%2Fkubelet%2Fplugins_registry%2Fcsi.tigera.io-reg.sock", }. Err: connection error: desc = "transport: failed to write client preface: write unix @->/registration/csi.tigera.io-reg.sock: use of closed network connection" Jul 14 23:16:07.479628 env[1247]: time="2025-07-14T23:16:07.479348813Z" level=info msg="RemovePodSandbox for \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\"" Jul 14 23:16:07.479628 env[1247]: time="2025-07-14T23:16:07.479389379Z" level=info msg="Forcibly stopping sandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\"" Jul 14 23:16:08.059234 kubelet[2110]: E0714 23:16:08.059191 2110 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="29.734s" Jul 14 23:16:08.746057 systemd[1]: run-containerd-runc-k8s.io-bbc81024144fad3b13550f07a396af3f2380da5ba523d5969e7dbd221c59395f-runc.sa67ue.mount: Deactivated successfully. Jul 14 23:16:11.811718 env[1247]: 2025-07-14 23:16:09.395 [WARNING][5645] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0", GenerateName:"calico-kube-controllers-6dfbf78cff-", Namespace:"calico-system", SelfLink:"", UID:"35477ad0-0bd5-4d19-a21c-4649c1795360", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6dfbf78cff", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b0adc12d934a6611c77bedaab96878b0f0b0f47cc7db10762fd86c3cc045ed4d", Pod:"calico-kube-controllers-6dfbf78cff-fbjqb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calide6b61bbbf7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:16:11.811718 env[1247]: 2025-07-14 23:16:09.415 [INFO][5645] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:16:11.811718 env[1247]: 2025-07-14 23:16:09.415 [INFO][5645] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" iface="eth0" netns="" Jul 14 23:16:11.811718 env[1247]: 2025-07-14 23:16:09.417 [INFO][5645] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:16:11.811718 env[1247]: 2025-07-14 23:16:09.417 [INFO][5645] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:16:11.811718 env[1247]: 2025-07-14 23:16:11.152 [INFO][5671] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" HandleID="k8s-pod-network.92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Workload="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:16:11.811718 env[1247]: 2025-07-14 23:16:11.210 [INFO][5671] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:16:11.811718 env[1247]: 2025-07-14 23:16:11.216 [INFO][5671] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:16:11.811718 env[1247]: 2025-07-14 23:16:11.676 [WARNING][5671] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" HandleID="k8s-pod-network.92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Workload="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:16:11.811718 env[1247]: 2025-07-14 23:16:11.676 [INFO][5671] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" HandleID="k8s-pod-network.92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Workload="localhost-k8s-calico--kube--controllers--6dfbf78cff--fbjqb-eth0" Jul 14 23:16:11.811718 env[1247]: 2025-07-14 23:16:11.704 [INFO][5671] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:16:11.811718 env[1247]: 2025-07-14 23:16:11.785 [INFO][5645] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e" Jul 14 23:16:11.811718 env[1247]: time="2025-07-14T23:16:11.805172713Z" level=info msg="TearDown network for sandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\" successfully" Jul 14 23:16:12.043045 env[1247]: time="2025-07-14T23:16:11.819071065Z" level=info msg="RemovePodSandbox \"92c79a36da000d7754ffaaad0e8d2edf12627368ff28ba82dccc0dd7270e1d4e\" returns successfully" Jul 14 23:16:13.876404 sshd[5473]: pam_unix(sshd:session): session closed for user core Jul 14 23:16:13.923000 audit[5473]: USER_END pid=5473 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:13.940985 kernel: audit: type=1106 audit(1752534973.923:1523): pid=5473 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:13.942942 kernel: audit: type=1104 audit(1752534973.931:1524): pid=5473 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:13.931000 audit[5473]: CRED_DISP pid=5473 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:13.948778 systemd[1]: sshd@10-139.178.70.104:22-139.178.89.65:57130.service: Deactivated successfully. Jul 14 23:16:13.960546 kernel: audit: type=1131 audit(1752534973.954:1525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.104:22-139.178.89.65:57130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:13.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.104:22-139.178.89.65:57130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:13.959313 systemd[1]: session-11.scope: Deactivated successfully. Jul 14 23:16:13.959458 systemd[1]: session-11.scope: Consumed 2.264s CPU time. Jul 14 23:16:13.961493 systemd-logind[1235]: Session 11 logged out. Waiting for processes to exit. Jul 14 23:16:13.969385 systemd-logind[1235]: Removed session 11. Jul 14 23:16:14.174645 env[1247]: time="2025-07-14T23:16:14.174307274Z" level=info msg="StopPodSandbox for \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\"" Jul 14 23:16:14.282286 kubelet[2110]: I0714 23:16:14.282241 2110 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 14 23:16:14.294225 kubelet[2110]: I0714 23:16:14.282300 2110 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 14 23:16:14.571256 kubelet[2110]: I0714 23:16:14.571177 2110 scope.go:117] "RemoveContainer" containerID="8e19483e70f734639e6e7a5048be3f1892b1090d87f01c70617ef8704aa90ad4" Jul 14 23:16:14.636837 env[1247]: time="2025-07-14T23:16:14.636799909Z" level=info msg="CreateContainer within sandbox \"4930db5f0c340e1ae09245e8b04aa46ab9ac348516e5b757f45fa54ba80bb31b\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Jul 14 23:16:14.640846 kubelet[2110]: I0714 23:16:14.640768 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-hc4sl" podStartSLOduration=216.014534873 podStartE2EDuration="4m0.628341981s" podCreationTimestamp="2025-07-14 23:12:14 +0000 UTC" firstStartedPulling="2025-07-14 23:12:57.830352999 +0000 UTC m=+59.306959501" lastFinishedPulling="2025-07-14 23:13:22.444160108 +0000 UTC m=+83.920766609" observedRunningTime="2025-07-14 23:16:08.717623107 +0000 UTC m=+250.194229619" watchObservedRunningTime="2025-07-14 23:16:14.628341981 +0000 UTC m=+256.104948486" Jul 14 23:16:14.710294 kubelet[2110]: I0714 23:16:14.710248 2110 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-f8fg8" podStartSLOduration=199.35824702 podStartE2EDuration="3m59.710233549s" podCreationTimestamp="2025-07-14 23:12:15 +0000 UTC" firstStartedPulling="2025-07-14 23:12:56.073847274 +0000 UTC m=+57.550453771" lastFinishedPulling="2025-07-14 23:13:36.425833794 +0000 UTC m=+97.902440300" observedRunningTime="2025-07-14 23:16:14.700478434 +0000 UTC m=+256.177084938" watchObservedRunningTime="2025-07-14 23:16:14.710233549 +0000 UTC m=+256.186840060" Jul 14 23:16:14.734042 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1717672757.mount: Deactivated successfully. Jul 14 23:16:14.739865 env[1247]: time="2025-07-14T23:16:14.739837021Z" level=info msg="CreateContainer within sandbox \"4930db5f0c340e1ae09245e8b04aa46ab9ac348516e5b757f45fa54ba80bb31b\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"93bdeaf543a6c7803888338e981c6cd26e6b1be5761b7c749f09be70b8166ae6\"" Jul 14 23:16:14.740369 env[1247]: time="2025-07-14T23:16:14.740354486Z" level=info msg="StartContainer for \"93bdeaf543a6c7803888338e981c6cd26e6b1be5761b7c749f09be70b8166ae6\"" Jul 14 23:16:14.796277 systemd[1]: Started cri-containerd-93bdeaf543a6c7803888338e981c6cd26e6b1be5761b7c749f09be70b8166ae6.scope. Jul 14 23:16:14.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.881931 kernel: audit: type=1400 audit(1752534974.862:1526): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.886046 kernel: audit: type=1400 audit(1752534974.862:1527): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.886101 kernel: audit: type=1400 audit(1752534974.862:1528): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.887223 kernel: audit: type=1400 audit(1752534974.862:1529): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.887266 kernel: audit: type=1400 audit(1752534974.862:1530): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.887287 kernel: audit: type=1400 audit(1752534974.862:1531): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.887307 kernel: audit: type=1400 audit(1752534974.862:1532): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.862000 audit: BPF prog-id=231 op=LOAD Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1794 pid=5718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:14.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933626465616635343361366337383033383838333338653938316336 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=1794 pid=5718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:14.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933626465616635343361366337383033383838333338653938316336 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit: BPF prog-id=232 op=LOAD Jul 14 23:16:14.865000 audit[5718]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000318990 items=0 ppid=1794 pid=5718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:14.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933626465616635343361366337383033383838333338653938316336 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit: BPF prog-id=233 op=LOAD Jul 14 23:16:14.865000 audit[5718]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003189d8 items=0 ppid=1794 pid=5718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:14.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933626465616635343361366337383033383838333338653938316336 Jul 14 23:16:14.865000 audit: BPF prog-id=233 op=UNLOAD Jul 14 23:16:14.865000 audit: BPF prog-id=232 op=UNLOAD Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:14.865000 audit: BPF prog-id=234 op=LOAD Jul 14 23:16:14.865000 audit[5718]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000318de8 items=0 ppid=1794 pid=5718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:14.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933626465616635343361366337383033383838333338653938316336 Jul 14 23:16:14.941739 env[1247]: time="2025-07-14T23:16:14.941671483Z" level=info msg="StartContainer for \"93bdeaf543a6c7803888338e981c6cd26e6b1be5761b7c749f09be70b8166ae6\" returns successfully" Jul 14 23:16:16.021714 env[1247]: 2025-07-14 23:16:15.014 [WARNING][5690] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" WorkloadEndpoint="localhost-k8s-whisker--558c5f5677--d22kz-eth0" Jul 14 23:16:16.021714 env[1247]: 2025-07-14 23:16:15.018 [INFO][5690] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:16:16.021714 env[1247]: 2025-07-14 23:16:15.018 [INFO][5690] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" iface="eth0" netns="" Jul 14 23:16:16.021714 env[1247]: 2025-07-14 23:16:15.019 [INFO][5690] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:16:16.021714 env[1247]: 2025-07-14 23:16:15.019 [INFO][5690] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:16:16.021714 env[1247]: 2025-07-14 23:16:15.744 [INFO][5744] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" HandleID="k8s-pod-network.ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Workload="localhost-k8s-whisker--558c5f5677--d22kz-eth0" Jul 14 23:16:16.021714 env[1247]: 2025-07-14 23:16:15.763 [INFO][5744] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:16:16.021714 env[1247]: 2025-07-14 23:16:15.766 [INFO][5744] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:16:16.021714 env[1247]: 2025-07-14 23:16:15.956 [WARNING][5744] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" HandleID="k8s-pod-network.ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Workload="localhost-k8s-whisker--558c5f5677--d22kz-eth0" Jul 14 23:16:16.021714 env[1247]: 2025-07-14 23:16:15.957 [INFO][5744] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" HandleID="k8s-pod-network.ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Workload="localhost-k8s-whisker--558c5f5677--d22kz-eth0" Jul 14 23:16:16.021714 env[1247]: 2025-07-14 23:16:15.959 [INFO][5744] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:16:16.021714 env[1247]: 2025-07-14 23:16:15.986 [INFO][5690] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:16:16.112008 env[1247]: time="2025-07-14T23:16:16.025204987Z" level=info msg="TearDown network for sandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\" successfully" Jul 14 23:16:16.112008 env[1247]: time="2025-07-14T23:16:16.025234227Z" level=info msg="StopPodSandbox for \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\" returns successfully" Jul 14 23:16:16.879685 env[1247]: time="2025-07-14T23:16:16.879652549Z" level=info msg="RemovePodSandbox for \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\"" Jul 14 23:16:16.880987 env[1247]: time="2025-07-14T23:16:16.879682814Z" level=info msg="Forcibly stopping sandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\"" Jul 14 23:16:17.621991 kubelet[2110]: I0714 23:16:17.621962 2110 scope.go:117] "RemoveContainer" containerID="ff9dd5d6be471e5400946bc9807d009656848f808451d06da60e9fbd585a5324" Jul 14 23:16:17.724851 env[1247]: time="2025-07-14T23:16:17.724784498Z" level=info msg="CreateContainer within sandbox \"c6f5473f9ea4a26cf52440966858c09bcc703256bf066fe9a2ba2b68c73912bf\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Jul 14 23:16:17.819044 env[1247]: time="2025-07-14T23:16:17.818949258Z" level=info msg="CreateContainer within sandbox \"c6f5473f9ea4a26cf52440966858c09bcc703256bf066fe9a2ba2b68c73912bf\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"ca618c41ae3f4640108070317218de073ee07a6f07feb0747867f42b7076e7e9\"" Jul 14 23:16:17.829143 env[1247]: time="2025-07-14T23:16:17.829012224Z" level=info msg="StartContainer for \"ca618c41ae3f4640108070317218de073ee07a6f07feb0747867f42b7076e7e9\"" Jul 14 23:16:17.958036 systemd[1]: Started cri-containerd-ca618c41ae3f4640108070317218de073ee07a6f07feb0747867f42b7076e7e9.scope. Jul 14 23:16:17.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.980000 audit: BPF prog-id=235 op=LOAD Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=1830 pid=5787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:17.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361363138633431616533663436343031303830373033313732313864 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=1830 pid=5787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:17.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361363138633431616533663436343031303830373033313732313864 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit: BPF prog-id=236 op=LOAD Jul 14 23:16:17.981000 audit[5787]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c00027ec80 items=0 ppid=1830 pid=5787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:17.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361363138633431616533663436343031303830373033313732313864 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit: BPF prog-id=237 op=LOAD Jul 14 23:16:17.981000 audit[5787]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c00027ecc8 items=0 ppid=1830 pid=5787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:17.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361363138633431616533663436343031303830373033313732313864 Jul 14 23:16:17.981000 audit: BPF prog-id=237 op=UNLOAD Jul 14 23:16:17.981000 audit: BPF prog-id=236 op=UNLOAD Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { perfmon } for pid=5787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit[5787]: AVC avc: denied { bpf } for pid=5787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:16:17.981000 audit: BPF prog-id=238 op=LOAD Jul 14 23:16:17.981000 audit[5787]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c00027f0d8 items=0 ppid=1830 pid=5787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:17.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361363138633431616533663436343031303830373033313732313864 Jul 14 23:16:18.159509 env[1247]: time="2025-07-14T23:16:18.024234308Z" level=info msg="StartContainer for \"ca618c41ae3f4640108070317218de073ee07a6f07feb0747867f42b7076e7e9\" returns successfully" Jul 14 23:16:18.493000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:18.493000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003da680 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:16:18.493000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:18.502000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:18.502000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0009c93b0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:16:18.502000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:18.919477 env[1247]: 2025-07-14 23:16:17.589 [WARNING][5767] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" WorkloadEndpoint="localhost-k8s-whisker--558c5f5677--d22kz-eth0" Jul 14 23:16:18.919477 env[1247]: 2025-07-14 23:16:17.598 [INFO][5767] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:16:18.919477 env[1247]: 2025-07-14 23:16:17.598 [INFO][5767] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" iface="eth0" netns="" Jul 14 23:16:18.919477 env[1247]: 2025-07-14 23:16:17.602 [INFO][5767] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:16:18.919477 env[1247]: 2025-07-14 23:16:17.602 [INFO][5767] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:16:18.919477 env[1247]: 2025-07-14 23:16:18.597 [INFO][5776] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" HandleID="k8s-pod-network.ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Workload="localhost-k8s-whisker--558c5f5677--d22kz-eth0" Jul 14 23:16:18.919477 env[1247]: 2025-07-14 23:16:18.624 [INFO][5776] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:16:18.919477 env[1247]: 2025-07-14 23:16:18.628 [INFO][5776] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:16:18.919477 env[1247]: 2025-07-14 23:16:18.795 [WARNING][5776] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" HandleID="k8s-pod-network.ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Workload="localhost-k8s-whisker--558c5f5677--d22kz-eth0" Jul 14 23:16:18.919477 env[1247]: 2025-07-14 23:16:18.795 [INFO][5776] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" HandleID="k8s-pod-network.ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Workload="localhost-k8s-whisker--558c5f5677--d22kz-eth0" Jul 14 23:16:18.919477 env[1247]: 2025-07-14 23:16:18.800 [INFO][5776] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:16:18.919477 env[1247]: 2025-07-14 23:16:18.847 [INFO][5767] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8" Jul 14 23:16:19.009693 kernel: kauditd_printk_skb: 113 callbacks suppressed Jul 14 23:16:19.022412 kernel: audit: type=1130 audit(1752534978.998:1564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.104:22-139.178.89.65:47808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:18.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.104:22-139.178.89.65:47808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:18.992193 systemd[1]: Started sshd@12-139.178.70.104:22-139.178.89.65:47808.service. Jul 14 23:16:19.038067 env[1247]: time="2025-07-14T23:16:18.919492829Z" level=info msg="TearDown network for sandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\" successfully" Jul 14 23:16:19.038067 env[1247]: time="2025-07-14T23:16:18.988740486Z" level=info msg="RemovePodSandbox \"ff9aa0853da93866c72689d14fe1918208e8005745684f78729258356a97ecf8\" returns successfully" Jul 14 23:16:19.302000 audit[5815]: USER_ACCT pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:19.313005 kernel: audit: type=1101 audit(1752534979.302:1565): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:19.316564 kernel: audit: type=1103 audit(1752534979.306:1566): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:19.318110 kernel: audit: type=1006 audit(1752534979.306:1567): pid=5815 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jul 14 23:16:19.318160 kernel: audit: type=1300 audit(1752534979.306:1567): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcd13ac10 a2=3 a3=0 items=0 ppid=1 pid=5815 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:19.318186 kernel: audit: type=1327 audit(1752534979.306:1567): proctitle=737368643A20636F7265205B707269765D Jul 14 23:16:19.306000 audit[5815]: CRED_ACQ pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:19.306000 audit[5815]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcd13ac10 a2=3 a3=0 items=0 ppid=1 pid=5815 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:19.306000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:16:19.374515 sshd[5815]: Accepted publickey for core from 139.178.89.65 port 47808 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:16:19.318886 sshd[5815]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:16:19.437127 systemd-logind[1235]: New session 12 of user core. Jul 14 23:16:19.442466 systemd[1]: Started session-12.scope. Jul 14 23:16:19.461229 kernel: audit: type=1105 audit(1752534979.453:1568): pid=5815 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:19.461331 kernel: audit: type=1103 audit(1752534979.454:1569): pid=5817 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:19.453000 audit[5815]: USER_START pid=5815 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:19.454000 audit[5817]: CRED_ACQ pid=5817 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:21.296176 env[1247]: time="2025-07-14T23:16:21.295943649Z" level=info msg="StopPodSandbox for \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\"" Jul 14 23:16:22.677498 env[1247]: 2025-07-14 23:16:22.039 [WARNING][5841] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5945579587--z48mb-eth0", GenerateName:"calico-apiserver-5945579587-", Namespace:"calico-apiserver", SelfLink:"", UID:"12707600-10bf-4bfb-be4a-9dc5ca0bfb2f", ResourceVersion:"1447", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5945579587", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee", Pod:"calico-apiserver-5945579587-z48mb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3cbbf8e42e3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:16:22.677498 env[1247]: 2025-07-14 23:16:22.046 [INFO][5841] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:16:22.677498 env[1247]: 2025-07-14 23:16:22.046 [INFO][5841] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" iface="eth0" netns="" Jul 14 23:16:22.677498 env[1247]: 2025-07-14 23:16:22.046 [INFO][5841] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:16:22.677498 env[1247]: 2025-07-14 23:16:22.046 [INFO][5841] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:16:22.677498 env[1247]: 2025-07-14 23:16:22.595 [INFO][5849] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" HandleID="k8s-pod-network.a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Workload="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:16:22.677498 env[1247]: 2025-07-14 23:16:22.607 [INFO][5849] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:16:22.677498 env[1247]: 2025-07-14 23:16:22.610 [INFO][5849] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:16:22.677498 env[1247]: 2025-07-14 23:16:22.642 [WARNING][5849] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" HandleID="k8s-pod-network.a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Workload="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:16:22.677498 env[1247]: 2025-07-14 23:16:22.642 [INFO][5849] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" HandleID="k8s-pod-network.a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Workload="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:16:22.677498 env[1247]: 2025-07-14 23:16:22.645 [INFO][5849] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:16:22.677498 env[1247]: 2025-07-14 23:16:22.654 [INFO][5841] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:16:22.677498 env[1247]: time="2025-07-14T23:16:22.677417195Z" level=info msg="TearDown network for sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\" successfully" Jul 14 23:16:22.677498 env[1247]: time="2025-07-14T23:16:22.677447839Z" level=info msg="StopPodSandbox for \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\" returns successfully" Jul 14 23:16:25.341303 env[1247]: time="2025-07-14T23:16:25.341033948Z" level=info msg="RemovePodSandbox for \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\"" Jul 14 23:16:25.341303 env[1247]: time="2025-07-14T23:16:25.341060508Z" level=info msg="Forcibly stopping sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\"" Jul 14 23:16:28.536391 env[1247]: 2025-07-14 23:16:26.362 [WARNING][5864] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5945579587--z48mb-eth0", GenerateName:"calico-apiserver-5945579587-", Namespace:"calico-apiserver", SelfLink:"", UID:"12707600-10bf-4bfb-be4a-9dc5ca0bfb2f", ResourceVersion:"1447", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5945579587", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"240296fc9ba94dbc0eaf205feba580761a120d50b58883b433a57f30df8376ee", Pod:"calico-apiserver-5945579587-z48mb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3cbbf8e42e3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:16:28.536391 env[1247]: 2025-07-14 23:16:26.366 [INFO][5864] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:16:28.536391 env[1247]: 2025-07-14 23:16:26.366 [INFO][5864] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" iface="eth0" netns="" Jul 14 23:16:28.536391 env[1247]: 2025-07-14 23:16:26.366 [INFO][5864] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:16:28.536391 env[1247]: 2025-07-14 23:16:26.366 [INFO][5864] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:16:28.536391 env[1247]: 2025-07-14 23:16:27.947 [INFO][5873] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" HandleID="k8s-pod-network.a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Workload="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:16:28.536391 env[1247]: 2025-07-14 23:16:28.012 [INFO][5873] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:16:28.536391 env[1247]: 2025-07-14 23:16:28.012 [INFO][5873] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:16:28.536391 env[1247]: 2025-07-14 23:16:28.418 [WARNING][5873] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" HandleID="k8s-pod-network.a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Workload="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:16:28.536391 env[1247]: 2025-07-14 23:16:28.418 [INFO][5873] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" HandleID="k8s-pod-network.a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Workload="localhost-k8s-calico--apiserver--5945579587--z48mb-eth0" Jul 14 23:16:28.536391 env[1247]: 2025-07-14 23:16:28.423 [INFO][5873] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:16:28.536391 env[1247]: 2025-07-14 23:16:28.478 [INFO][5864] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2" Jul 14 23:16:28.536391 env[1247]: time="2025-07-14T23:16:28.536281162Z" level=info msg="TearDown network for sandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\" successfully" Jul 14 23:16:28.755803 env[1247]: time="2025-07-14T23:16:28.563079271Z" level=info msg="RemovePodSandbox \"a958b2b7eae7db49243a30662fef532a2c641fc08f911267eafdcd3ede8b4fa2\" returns successfully" Jul 14 23:16:31.571693 kubelet[2110]: E0714 23:16:31.564121 2110 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="10.848s" Jul 14 23:16:34.794836 kubelet[2110]: E0714 23:16:34.794797 2110 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="3.152s" Jul 14 23:16:35.600810 sshd[5815]: pam_unix(sshd:session): session closed for user core Jul 14 23:16:35.678666 kernel: audit: type=1130 audit(1752534995.628:1570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.104:22-139.178.89.65:36856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:35.685271 kernel: audit: type=1106 audit(1752534995.651:1571): pid=5815 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:35.685318 kernel: audit: type=1104 audit(1752534995.655:1572): pid=5815 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:35.685341 kernel: audit: type=1131 audit(1752534995.673:1573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.104:22-139.178.89.65:47808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:35.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.104:22-139.178.89.65:36856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:35.651000 audit[5815]: USER_END pid=5815 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:35.655000 audit[5815]: CRED_DISP pid=5815 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:35.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.104:22-139.178.89.65:47808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:35.626430 systemd[1]: Started sshd@13-139.178.70.104:22-139.178.89.65:36856.service. Jul 14 23:16:35.672340 systemd[1]: sshd@12-139.178.70.104:22-139.178.89.65:47808.service: Deactivated successfully. Jul 14 23:16:35.680990 systemd[1]: session-12.scope: Deactivated successfully. Jul 14 23:16:35.681096 systemd[1]: session-12.scope: Consumed 1.587s CPU time. Jul 14 23:16:35.683595 systemd-logind[1235]: Session 12 logged out. Waiting for processes to exit. Jul 14 23:16:35.686593 systemd-logind[1235]: Removed session 12. Jul 14 23:16:35.783000 audit[5903]: USER_ACCT pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:35.793678 kernel: audit: type=1101 audit(1752534995.783:1574): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:35.793738 kernel: audit: type=1103 audit(1752534995.787:1575): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:35.797258 kernel: audit: type=1006 audit(1752534995.787:1576): pid=5903 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 14 23:16:35.797287 kernel: audit: type=1300 audit(1752534995.787:1576): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe06141b10 a2=3 a3=0 items=0 ppid=1 pid=5903 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:35.787000 audit[5903]: CRED_ACQ pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:35.787000 audit[5903]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe06141b10 a2=3 a3=0 items=0 ppid=1 pid=5903 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:35.840319 kernel: audit: type=1327 audit(1752534995.787:1576): proctitle=737368643A20636F7265205B707269765D Jul 14 23:16:35.787000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:16:35.845387 sshd[5903]: Accepted publickey for core from 139.178.89.65 port 36856 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:16:35.797579 sshd[5903]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:16:35.889602 systemd[1]: Started session-13.scope. Jul 14 23:16:35.890240 systemd-logind[1235]: New session 13 of user core. Jul 14 23:16:35.893000 audit[5903]: USER_START pid=5903 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:35.899067 kernel: audit: type=1105 audit(1752534995.893:1577): pid=5903 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:35.897000 audit[5907]: CRED_ACQ pid=5907 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:36.011000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:36.011000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000bc3120 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:16:36.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:36.014000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:36.014000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000bc3440 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:16:36.014000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:36.019000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:36.019000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e408c0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:16:36.019000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:36.019000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:36.019000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e40900 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:16:36.019000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:36.727000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6760 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 14 23:16:36.727000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ce2800 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:16:36.727000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:36.738000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=7289 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 14 23:16:36.738000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001267090 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:16:36.738000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:36.752000 audit[5934]: AVC avc: denied { execute } for pid=5934 comm="kube-controller" name="uds" dev="sda9" ino=7466 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Jul 14 23:16:36.752000 audit[5934]: SYSCALL arch=c000003e syscall=59 success=no exit=-13 a0=c0012672c0 a1=c000ae18c0 a2=c001131b00 a3=0 items=0 ppid=5729 pid=5934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:16:36.752000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:39.093000 audit[5936]: NETFILTER_CFG table=filter:126 family=2 entries=10 op=nft_register_rule pid=5936 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:16:39.093000 audit[5936]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffbb9383c0 a2=0 a3=7fffbb9383ac items=0 ppid=2217 pid=5936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:39.093000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:16:39.106000 audit[5936]: NETFILTER_CFG table=nat:127 family=2 entries=48 op=nft_register_chain pid=5936 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:16:39.106000 audit[5936]: SYSCALL arch=c000003e syscall=46 success=yes exit=18388 a0=3 a1=7fffbb9383c0 a2=0 a3=7fffbb9383ac items=0 ppid=2217 pid=5936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:39.106000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:16:39.156000 audit[5938]: NETFILTER_CFG table=filter:128 family=2 entries=8 op=nft_register_rule pid=5938 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:16:39.156000 audit[5938]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd6b88d930 a2=0 a3=7ffd6b88d91c items=0 ppid=2217 pid=5938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:39.156000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:16:39.160000 audit[5938]: NETFILTER_CFG table=nat:129 family=2 entries=26 op=nft_register_rule pid=5938 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:16:39.160000 audit[5938]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffd6b88d930 a2=0 a3=7ffd6b88d91c items=0 ppid=2217 pid=5938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:39.160000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:16:53.495880 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 14 23:16:53.558732 kernel: audit: type=1400 audit(1752535013.482:1590): avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:16:53.569518 kernel: audit: type=1300 audit(1752535013.482:1590): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002882c00 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:16:53.572198 kernel: audit: type=1327 audit(1752535013.482:1590): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:16:53.482000 audit[4168]: AVC avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:16:53.482000 audit[4168]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002882c00 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:16:53.482000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:16:56.037000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.354614 kernel: audit: type=1400 audit(1752535016.037:1591): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.364351 kernel: audit: type=1300 audit(1752535016.037:1591): arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c013ea95c0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:16:56.364412 kernel: audit: type=1327 audit(1752535016.037:1591): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.366518 kernel: audit: type=1400 audit(1752535016.144:1592): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.366554 kernel: audit: type=1400 audit(1752535016.144:1593): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.366580 kernel: audit: type=1300 audit(1752535016.144:1592): arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00b24ae70 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:16:56.366602 kernel: audit: type=1327 audit(1752535016.144:1592): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.037000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c013ea95c0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:16:56.037000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.144000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.144000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.144000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00b24ae70 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:16:56.144000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.144000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c007b2ef90 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:16:56.144000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.245000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.245000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00b24b920 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:16:56.245000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.245000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.245000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c013ea9600 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:16:56.245000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.302000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.302000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c007b2f230 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:16:56.302000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:57.643000 audit[4352]: AVC avc: denied { watch } for pid=4352 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.1792147082/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c468,c664 tclass=file permissive=0 Jul 14 23:16:57.643000 audit[4352]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001fd2480 a2=fc6 a3=0 items=0 ppid=4296 pid=4352 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 key=(null) Jul 14 23:16:57.643000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:17:13.223178 systemd[1]: Started sshd@14-139.178.70.104:22-14.103.170.138:37986.service. Jul 14 23:17:13.521593 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 14 23:17:13.566619 kernel: audit: type=1130 audit(1752535033.246:1598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.104:22-14.103.170.138:37986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:13.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.104:22-14.103.170.138:37986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:14.230890 systemd[1]: Started sshd@15-139.178.70.104:22-185.255.90.238:48324.service. Jul 14 23:17:14.750374 kernel: audit: type=1130 audit(1752535034.237:1599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.104:22-185.255.90.238:48324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:14.237000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.104:22-185.255.90.238:48324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:15.068839 sshd[5948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.170.138 user=root Jul 14 23:17:15.129637 kernel: audit: type=1100 audit(1752535035.072:1600): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=14.103.170.138 addr=14.103.170.138 terminal=ssh res=failed' Jul 14 23:17:15.072000 audit[5948]: USER_AUTH pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=14.103.170.138 addr=14.103.170.138 terminal=ssh res=failed' Jul 14 23:17:16.731900 sshd[5948]: Failed password for root from 14.103.170.138 port 37986 ssh2 Jul 14 23:17:17.189108 kernel: audit: type=1100 audit(1752535036.863:1601): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.255.90.238 addr=185.255.90.238 terminal=ssh res=failed' Jul 14 23:17:16.863000 audit[5951]: USER_AUTH pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.255.90.238 addr=185.255.90.238 terminal=ssh res=failed' Jul 14 23:17:16.834329 sshd[5951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.255.90.238 user=root Jul 14 23:17:17.522474 sshd[5948]: Received disconnect from 14.103.170.138 port 37986:11: Bye Bye [preauth] Jul 14 23:17:17.697351 sshd[5948]: Disconnected from authenticating user root 14.103.170.138 port 37986 [preauth] Jul 14 23:17:17.889428 systemd[1]: sshd@14-139.178.70.104:22-14.103.170.138:37986.service: Deactivated successfully. Jul 14 23:17:17.921111 kernel: audit: type=1131 audit(1752535037.911:1602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.104:22-14.103.170.138:37986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:17.911000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.104:22-14.103.170.138:37986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:18.362876 sshd[5951]: Failed password for root from 185.255.90.238 port 48324 ssh2 Jul 14 23:17:18.677000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:18.721842 kernel: audit: type=1400 audit(1752535038.677:1603): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:18.727109 kernel: audit: type=1300 audit(1752535038.677:1603): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0018fec30 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:17:18.729885 kernel: audit: type=1327 audit(1752535038.677:1603): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:18.733334 kernel: audit: type=1400 audit(1752535038.677:1604): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:18.733363 kernel: audit: type=1300 audit(1752535038.677:1604): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000e417c0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:17:18.733406 kernel: audit: type=1327 audit(1752535038.677:1604): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:18.677000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0018fec30 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:17:18.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:18.677000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:18.677000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000e417c0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:17:18.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:19.418815 sshd[5951]: Received disconnect from 185.255.90.238 port 48324:11: Bye Bye [preauth] Jul 14 23:17:19.418815 sshd[5951]: Disconnected from authenticating user root 185.255.90.238 port 48324 [preauth] Jul 14 23:17:19.588541 kernel: audit: type=1131 audit(1752535039.565:1605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.104:22-185.255.90.238:48324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:19.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.104:22-185.255.90.238:48324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:19.551697 systemd[1]: sshd@15-139.178.70.104:22-185.255.90.238:48324.service: Deactivated successfully. Jul 14 23:17:25.477337 sshd[5903]: pam_unix(sshd:session): session closed for user core Jul 14 23:17:25.773109 kernel: audit: type=1130 audit(1752535045.664:1606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.104:22-139.178.89.65:54044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:25.775567 kernel: audit: type=1106 audit(1752535045.664:1607): pid=5903 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:25.775604 kernel: audit: type=1104 audit(1752535045.678:1608): pid=5903 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:25.775624 kernel: audit: type=1131 audit(1752535045.730:1609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.104:22-139.178.89.65:36856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:25.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.104:22-139.178.89.65:54044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:25.664000 audit[5903]: USER_END pid=5903 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:25.678000 audit[5903]: CRED_DISP pid=5903 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:25.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.104:22-139.178.89.65:36856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:25.664994 systemd[1]: Started sshd@16-139.178.70.104:22-139.178.89.65:54044.service. Jul 14 23:17:25.730886 systemd[1]: sshd@13-139.178.70.104:22-139.178.89.65:36856.service: Deactivated successfully. Jul 14 23:17:25.731499 systemd[1]: session-13.scope: Deactivated successfully. Jul 14 23:17:25.731587 systemd[1]: session-13.scope: Consumed 4.586s CPU time. Jul 14 23:17:25.732238 systemd-logind[1235]: Session 13 logged out. Waiting for processes to exit. Jul 14 23:17:25.735985 systemd-logind[1235]: Removed session 13. Jul 14 23:17:25.891000 audit[5956]: USER_ACCT pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:25.893811 sshd[5956]: Accepted publickey for core from 139.178.89.65 port 54044 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:17:25.895771 kernel: audit: type=1101 audit(1752535045.891:1610): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:25.896000 audit[5956]: CRED_ACQ pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:25.902045 kernel: audit: type=1103 audit(1752535045.896:1611): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:25.902111 kernel: audit: type=1006 audit(1752535045.896:1612): pid=5956 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 14 23:17:25.902185 kernel: audit: type=1300 audit(1752535045.896:1612): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea0904360 a2=3 a3=0 items=0 ppid=1 pid=5956 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:17:25.896000 audit[5956]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea0904360 a2=3 a3=0 items=0 ppid=1 pid=5956 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:17:25.924967 kernel: audit: type=1327 audit(1752535045.896:1612): proctitle=737368643A20636F7265205B707269765D Jul 14 23:17:25.896000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:17:25.905590 sshd[5956]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:17:25.967069 systemd[1]: Started session-14.scope. Jul 14 23:17:25.967933 systemd-logind[1235]: New session 14 of user core. Jul 14 23:17:25.973000 audit[5956]: USER_START pid=5956 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:25.978825 kernel: audit: type=1105 audit(1752535045.973:1613): pid=5956 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:25.979000 audit[5959]: CRED_ACQ pid=5959 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:31.501938 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 23:17:31.629716 kernel: audit: type=1325 audit(1752535051.480:1615): table=filter:130 family=2 entries=10 op=nft_register_rule pid=5976 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:17:31.641453 kernel: audit: type=1300 audit(1752535051.480:1615): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffccc004310 a2=0 a3=7ffccc0042fc items=0 ppid=2217 pid=5976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:17:31.646733 kernel: audit: type=1327 audit(1752535051.480:1615): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:17:31.648143 kernel: audit: type=1325 audit(1752535051.489:1616): table=nat:131 family=2 entries=36 op=nft_unregister_chain pid=5976 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:17:31.654259 kernel: audit: type=1300 audit(1752535051.489:1616): arch=c000003e syscall=46 success=yes exit=7052 a0=3 a1=7ffccc004310 a2=0 a3=7ffccc0042fc items=0 ppid=2217 pid=5976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:17:31.658147 kernel: audit: type=1327 audit(1752535051.489:1616): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:17:31.658197 kernel: audit: type=1325 audit(1752535051.525:1617): table=filter:132 family=2 entries=17 op=nft_register_rule pid=5978 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:17:31.660958 kernel: audit: type=1300 audit(1752535051.525:1617): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff30f4ba00 a2=0 a3=7fff30f4b9ec items=0 ppid=2217 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:17:31.662804 kernel: audit: type=1327 audit(1752535051.525:1617): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:17:31.662863 kernel: audit: type=1325 audit(1752535051.534:1618): table=nat:133 family=2 entries=63 op=nft_unregister_chain pid=5978 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:17:31.480000 audit[5976]: NETFILTER_CFG table=filter:130 family=2 entries=10 op=nft_register_rule pid=5976 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:17:31.480000 audit[5976]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffccc004310 a2=0 a3=7ffccc0042fc items=0 ppid=2217 pid=5976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:17:31.480000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:17:31.489000 audit[5976]: NETFILTER_CFG table=nat:131 family=2 entries=36 op=nft_unregister_chain pid=5976 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:17:31.489000 audit[5976]: SYSCALL arch=c000003e syscall=46 success=yes exit=7052 a0=3 a1=7ffccc004310 a2=0 a3=7ffccc0042fc items=0 ppid=2217 pid=5976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:17:31.489000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:17:31.525000 audit[5978]: NETFILTER_CFG table=filter:132 family=2 entries=17 op=nft_register_rule pid=5978 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:17:31.525000 audit[5978]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff30f4ba00 a2=0 a3=7fff30f4b9ec items=0 ppid=2217 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:17:31.525000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:17:31.534000 audit[5978]: NETFILTER_CFG table=nat:133 family=2 entries=63 op=nft_unregister_chain pid=5978 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:17:31.534000 audit[5978]: SYSCALL arch=c000003e syscall=46 success=yes exit=4492 a0=3 a1=7fff30f4ba00 a2=0 a3=7fff30f4b9ec items=0 ppid=2217 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:17:31.534000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:17:36.100000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:36.100000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0033c1240 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:17:36.100000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:36.118000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:36.118000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0033c1260 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:17:36.118000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:36.188000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:36.188000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0034a0340 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:17:36.188000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:36.221000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:36.221000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0034a0360 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:17:36.221000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:53.648000 audit[4168]: AVC avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:17:54.278846 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 14 23:17:54.319891 kernel: audit: type=1400 audit(1752535073.648:1623): avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:17:54.324248 kernel: audit: type=1300 audit(1752535073.648:1623): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002882060 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:17:54.330583 kernel: audit: type=1327 audit(1752535073.648:1623): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:17:53.648000 audit[4168]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002882060 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:17:53.648000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:17:56.129000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.398663 kernel: audit: type=1400 audit(1752535076.129:1624): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.445783 kernel: audit: type=1300 audit(1752535076.129:1624): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0112e7500 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:17:56.445845 kernel: audit: type=1327 audit(1752535076.129:1624): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:56.455547 kernel: audit: type=1400 audit(1752535076.146:1625): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.467499 kernel: audit: type=1300 audit(1752535076.146:1625): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c00a663b00 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:17:56.467670 kernel: audit: type=1327 audit(1752535076.146:1625): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:56.473892 kernel: audit: type=1400 audit(1752535076.196:1626): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.129000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0112e7500 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:17:56.129000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:56.146000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.146000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c00a663b00 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:17:56.146000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:56.196000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.196000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c00a663c50 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:17:56.196000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:56.257000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.257000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0112e7620 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:17:56.257000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:56.347000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.347000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c00a663e00 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:17:56.347000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:56.357000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.357000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00ca8bef0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:17:56.357000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:57.711000 audit[4352]: AVC avc: denied { watch } for pid=4352 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.1792147082/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c468,c664 tclass=file permissive=0 Jul 14 23:17:57.711000 audit[4352]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001fd2de0 a2=fc6 a3=0 items=0 ppid=4296 pid=4352 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 key=(null) Jul 14 23:17:57.711000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:18:18.904000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:19.262668 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 14 23:18:19.318615 kernel: audit: type=1400 audit(1752535098.904:1631): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:19.323432 kernel: audit: type=1300 audit(1752535098.904:1631): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0036f2a20 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:18:19.323502 kernel: audit: type=1327 audit(1752535098.904:1631): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:19.330558 kernel: audit: type=1400 audit(1752535098.917:1632): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:19.330629 kernel: audit: type=1300 audit(1752535098.917:1632): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0035dbd40 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:18:19.330660 kernel: audit: type=1327 audit(1752535098.917:1632): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:18.904000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0036f2a20 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:18:18.904000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:18.917000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:18.917000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0035dbd40 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:18:18.917000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:25.422608 systemd[1]: Started sshd@17-139.178.70.104:22-185.255.90.238:45714.service. Jul 14 23:18:25.704648 kernel: audit: type=1130 audit(1752535105.446:1633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.104:22-185.255.90.238:45714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:25.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.104:22-185.255.90.238:45714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:27.681918 sshd[6008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.255.90.238 user=root Jul 14 23:18:27.917666 kernel: audit: type=1100 audit(1752535107.681:1634): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.255.90.238 addr=185.255.90.238 terminal=ssh res=failed' Jul 14 23:18:27.681000 audit[6008]: USER_AUTH pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.255.90.238 addr=185.255.90.238 terminal=ssh res=failed' Jul 14 23:18:29.564221 sshd[6008]: Failed password for root from 185.255.90.238 port 45714 ssh2 Jul 14 23:18:30.206953 sshd[6008]: Received disconnect from 185.255.90.238 port 45714:11: Bye Bye [preauth] Jul 14 23:18:30.206953 sshd[6008]: Disconnected from authenticating user root 185.255.90.238 port 45714 [preauth] Jul 14 23:18:30.424224 systemd[1]: sshd@17-139.178.70.104:22-185.255.90.238:45714.service: Deactivated successfully. Jul 14 23:18:30.462585 kernel: audit: type=1131 audit(1752535110.441:1635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.104:22-185.255.90.238:45714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:30.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.104:22-185.255.90.238:45714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:36.464000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:36.953365 kernel: audit: type=1400 audit(1752535116.464:1636): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:36.969142 kernel: audit: type=1300 audit(1752535116.464:1636): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0038be380 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:18:36.972203 kernel: audit: type=1327 audit(1752535116.464:1636): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:36.972261 kernel: audit: type=1400 audit(1752535116.468:1637): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:36.972281 kernel: audit: type=1300 audit(1752535116.468:1637): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c003645ca0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:18:36.979613 kernel: audit: type=1327 audit(1752535116.468:1637): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:36.985379 kernel: audit: type=1400 audit(1752535116.480:1638): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:36.985438 kernel: audit: type=1300 audit(1752535116.480:1638): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c003645cc0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:18:36.990139 kernel: audit: type=1327 audit(1752535116.480:1638): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:36.990191 kernel: audit: type=1400 audit(1752535116.500:1639): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:36.464000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0038be380 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:18:36.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:36.468000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:36.468000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c003645ca0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:18:36.468000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:36.480000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:36.480000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c003645cc0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:18:36.480000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:36.500000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:36.500000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0038be3a0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:18:36.500000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:44.633309 sshd[5956]: pam_unix(sshd:session): session closed for user core Jul 14 23:18:44.745901 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 23:18:44.752730 kernel: audit: type=1106 audit(1752535124.674:1640): pid=5956 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:44.758570 kernel: audit: type=1104 audit(1752535124.679:1641): pid=5956 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:44.758633 kernel: audit: type=1130 audit(1752535124.693:1642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.104:22-139.178.89.65:51678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:44.759864 kernel: audit: type=1131 audit(1752535124.694:1643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.104:22-139.178.89.65:54044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:44.674000 audit[5956]: USER_END pid=5956 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:44.679000 audit[5956]: CRED_DISP pid=5956 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:44.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.104:22-139.178.89.65:51678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:44.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.104:22-139.178.89.65:54044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:44.694447 systemd[1]: Started sshd@18-139.178.70.104:22-139.178.89.65:51678.service. Jul 14 23:18:44.695002 systemd[1]: sshd@16-139.178.70.104:22-139.178.89.65:54044.service: Deactivated successfully. Jul 14 23:18:44.695670 systemd[1]: session-14.scope: Deactivated successfully. Jul 14 23:18:44.695782 systemd[1]: session-14.scope: Consumed 6.492s CPU time. Jul 14 23:18:44.702857 systemd-logind[1235]: Session 14 logged out. Waiting for processes to exit. Jul 14 23:18:44.704399 systemd-logind[1235]: Removed session 14. Jul 14 23:18:44.905000 audit[6016]: USER_ACCT pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:44.909000 audit[6016]: CRED_ACQ pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:44.913638 kernel: audit: type=1101 audit(1752535124.905:1644): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:44.913682 kernel: audit: type=1103 audit(1752535124.909:1645): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:44.913707 kernel: audit: type=1006 audit(1752535124.909:1646): pid=6016 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 14 23:18:44.913730 sshd[6016]: Accepted publickey for core from 139.178.89.65 port 51678 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:18:44.909000 audit[6016]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5b85bec0 a2=3 a3=0 items=0 ppid=1 pid=6016 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:44.943371 kernel: audit: type=1300 audit(1752535124.909:1646): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5b85bec0 a2=3 a3=0 items=0 ppid=1 pid=6016 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:44.943463 kernel: audit: type=1327 audit(1752535124.909:1646): proctitle=737368643A20636F7265205B707269765D Jul 14 23:18:44.909000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:18:44.915545 sshd[6016]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:18:44.997706 systemd[1]: Started session-15.scope. Jul 14 23:18:44.997986 systemd-logind[1235]: New session 15 of user core. Jul 14 23:18:45.008861 kernel: audit: type=1105 audit(1752535125.004:1647): pid=6016 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:45.004000 audit[6016]: USER_START pid=6016 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:45.008000 audit[6019]: CRED_ACQ pid=6019 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:47.000133 sshd[6016]: pam_unix(sshd:session): session closed for user core Jul 14 23:18:47.065000 audit[6016]: USER_END pid=6016 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:47.068000 audit[6016]: CRED_DISP pid=6016 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:47.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.104:22-139.178.89.65:51682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:47.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.104:22-139.178.89.65:51678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:47.081306 systemd[1]: Started sshd@19-139.178.70.104:22-139.178.89.65:51682.service. Jul 14 23:18:47.083454 systemd[1]: sshd@18-139.178.70.104:22-139.178.89.65:51678.service: Deactivated successfully. Jul 14 23:18:47.084175 systemd[1]: session-15.scope: Deactivated successfully. Jul 14 23:18:47.085051 systemd-logind[1235]: Session 15 logged out. Waiting for processes to exit. Jul 14 23:18:47.085884 systemd-logind[1235]: Removed session 15. Jul 14 23:18:47.187133 sshd[6026]: Accepted publickey for core from 139.178.89.65 port 51682 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:18:47.186000 audit[6026]: USER_ACCT pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:47.187000 audit[6026]: CRED_ACQ pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:47.187000 audit[6026]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe73c15510 a2=3 a3=0 items=0 ppid=1 pid=6026 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:47.187000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:18:47.190125 sshd[6026]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:18:47.218416 systemd[1]: Started session-16.scope. Jul 14 23:18:47.219412 systemd-logind[1235]: New session 16 of user core. Jul 14 23:18:47.221000 audit[6026]: USER_START pid=6026 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:47.222000 audit[6029]: CRED_ACQ pid=6029 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:47.375885 kubelet[2110]: I0714 23:18:47.374819 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.381681 kubelet[2110]: I0714 23:18:47.376230 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-backend-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.391997 kubelet[2110]: I0714 23:18:47.391956 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.392167 kubelet[2110]: I0714 23:18:47.392152 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"tigera-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.393248 kubelet[2110]: I0714 23:18:47.392230 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.393248 kubelet[2110]: I0714 23:18:47.392254 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.393248 kubelet[2110]: I0714 23:18:47.392280 2110 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.393248 kubelet[2110]: I0714 23:18:47.392308 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.393248 kubelet[2110]: I0714 23:18:47.392328 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"coredns\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.639085 kubelet[2110]: I0714 23:18:47.637546 2110 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.642683 kubelet[2110]: I0714 23:18:47.642654 2110 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.674088 kubelet[2110]: I0714 23:18:47.674047 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.782201 kubelet[2110]: I0714 23:18:47.782165 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-proxy\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:47.885424 kubelet[2110]: I0714 23:18:47.883015 2110 reflector.go:556] "Warning: watch ended with error" reflector="pkg/kubelet/config/apiserver.go:66" type="*v1.Pod" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:48.370463 kubelet[2110]: I0714 23:18:48.369105 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:48.416179 kubelet[2110]: I0714 23:18:48.416134 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:48.566371 kubelet[2110]: I0714 23:18:47.339837 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"typha-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:18:54.072000 audit[4168]: AVC avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:18:54.305321 kernel: kauditd_printk_skb: 12 callbacks suppressed Jul 14 23:18:54.328376 kernel: audit: type=1400 audit(1752535134.072:1658): avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:18:54.333844 kernel: audit: type=1300 audit(1752535134.072:1658): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002882600 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:18:54.333882 kernel: audit: type=1327 audit(1752535134.072:1658): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:18:54.072000 audit[4168]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002882600 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:18:54.072000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:18:55.692643 kernel: audit: type=1325 audit(1752535135.675:1659): table=filter:134 family=2 entries=34 op=nft_register_rule pid=6040 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:18:55.780335 kernel: audit: type=1300 audit(1752535135.675:1659): arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7ffd397c7570 a2=0 a3=7ffd397c755c items=0 ppid=2217 pid=6040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:55.783889 kernel: audit: type=1327 audit(1752535135.675:1659): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:18:55.786200 kernel: audit: type=1325 audit(1752535135.684:1660): table=nat:135 family=2 entries=12 op=nft_register_rule pid=6040 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:18:55.787314 kernel: audit: type=1300 audit(1752535135.684:1660): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd397c7570 a2=0 a3=0 items=0 ppid=2217 pid=6040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:55.788282 kernel: audit: type=1327 audit(1752535135.684:1660): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:18:55.675000 audit[6040]: NETFILTER_CFG table=filter:134 family=2 entries=34 op=nft_register_rule pid=6040 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:18:55.675000 audit[6040]: SYSCALL arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7ffd397c7570 a2=0 a3=7ffd397c755c items=0 ppid=2217 pid=6040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:55.675000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:18:55.684000 audit[6040]: NETFILTER_CFG table=nat:135 family=2 entries=12 op=nft_register_rule pid=6040 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:18:55.684000 audit[6040]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd397c7570 a2=0 a3=0 items=0 ppid=2217 pid=6040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:55.684000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:18:56.382000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.493861 kernel: audit: type=1400 audit(1752535136.382:1661): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.382000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c012a76390 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:18:56.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.382000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.382000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00a8d8690 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:18:56.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.398000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.398000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c006c534a0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:18:56.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.466000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.466000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c00a8d8e10 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:18:56.466000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.469000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.469000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00a8d9020 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:18:56.469000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.477000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.477000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c009f70a00 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:18:56.477000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:57.272000 audit[6044]: NETFILTER_CFG table=filter:136 family=2 entries=46 op=nft_register_rule pid=6044 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:18:57.272000 audit[6044]: SYSCALL arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fff0d3fcc00 a2=0 a3=7fff0d3fcbec items=0 ppid=2217 pid=6044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:57.272000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:18:57.285000 audit[6044]: NETFILTER_CFG table=nat:137 family=2 entries=12 op=nft_register_rule pid=6044 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:18:57.285000 audit[6044]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff0d3fcc00 a2=0 a3=0 items=0 ppid=2217 pid=6044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:57.285000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:18:57.967000 audit[4352]: AVC avc: denied { watch } for pid=4352 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.1792147082/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c468,c664 tclass=file permissive=0 Jul 14 23:18:57.967000 audit[4352]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001fd2f60 a2=fc6 a3=0 items=0 ppid=4296 pid=4352 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 key=(null) Jul 14 23:18:57.967000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:18:59.034015 sshd[6026]: pam_unix(sshd:session): session closed for user core Jul 14 23:18:59.195722 kernel: kauditd_printk_skb: 26 callbacks suppressed Jul 14 23:18:59.204988 kernel: audit: type=1106 audit(1752535139.136:1670): pid=6026 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:59.207870 kernel: audit: type=1104 audit(1752535139.141:1671): pid=6026 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:59.209244 kernel: audit: type=1130 audit(1752535139.155:1672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.104:22-139.178.89.65:49470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:59.209269 kernel: audit: type=1131 audit(1752535139.161:1673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.104:22-139.178.89.65:51682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:59.136000 audit[6026]: USER_END pid=6026 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:59.141000 audit[6026]: CRED_DISP pid=6026 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:59.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.104:22-139.178.89.65:49470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:59.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.104:22-139.178.89.65:51682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:59.155735 systemd[1]: Started sshd@20-139.178.70.104:22-139.178.89.65:49470.service. Jul 14 23:18:59.162011 systemd[1]: sshd@19-139.178.70.104:22-139.178.89.65:51682.service: Deactivated successfully. Jul 14 23:18:59.162579 systemd[1]: session-16.scope: Deactivated successfully. Jul 14 23:18:59.165212 systemd-logind[1235]: Session 16 logged out. Waiting for processes to exit. Jul 14 23:18:59.166348 systemd-logind[1235]: Removed session 16. Jul 14 23:18:59.295909 sshd[6046]: Accepted publickey for core from 139.178.89.65 port 49470 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:18:59.294000 audit[6046]: USER_ACCT pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:59.305182 kernel: audit: type=1101 audit(1752535139.294:1674): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:59.305239 kernel: audit: type=1103 audit(1752535139.295:1675): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:59.305259 kernel: audit: type=1006 audit(1752535139.295:1676): pid=6046 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 14 23:18:59.295000 audit[6046]: CRED_ACQ pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:59.305969 sshd[6046]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:18:59.295000 audit[6046]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4d581140 a2=3 a3=0 items=0 ppid=1 pid=6046 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:59.379328 kernel: audit: type=1300 audit(1752535139.295:1676): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4d581140 a2=3 a3=0 items=0 ppid=1 pid=6046 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:59.379402 kernel: audit: type=1327 audit(1752535139.295:1676): proctitle=737368643A20636F7265205B707269765D Jul 14 23:18:59.295000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:18:59.426544 systemd-logind[1235]: New session 17 of user core. Jul 14 23:18:59.427297 systemd[1]: Started session-17.scope. Jul 14 23:18:59.433000 audit[6046]: USER_START pid=6046 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:59.437804 kernel: audit: type=1105 audit(1752535139.433:1677): pid=6046 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:59.434000 audit[6049]: CRED_ACQ pid=6049 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:09.383000 audit[6064]: NETFILTER_CFG table=filter:138 family=2 entries=34 op=nft_register_rule pid=6064 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:19:09.643592 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 23:19:09.675239 kernel: audit: type=1325 audit(1752535149.383:1679): table=filter:138 family=2 entries=34 op=nft_register_rule pid=6064 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:19:09.681323 kernel: audit: type=1300 audit(1752535149.383:1679): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffce8b37a0 a2=0 a3=7fffce8b378c items=0 ppid=2217 pid=6064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:19:09.687719 kernel: audit: type=1327 audit(1752535149.383:1679): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:19:09.687780 kernel: audit: type=1325 audit(1752535149.392:1680): table=nat:139 family=2 entries=96 op=nft_register_chain pid=6064 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:19:09.687812 kernel: audit: type=1300 audit(1752535149.392:1680): arch=c000003e syscall=46 success=yes exit=45612 a0=3 a1=7fffce8b37a0 a2=0 a3=7fffce8b378c items=0 ppid=2217 pid=6064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:19:09.691970 kernel: audit: type=1327 audit(1752535149.392:1680): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:19:09.383000 audit[6064]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffce8b37a0 a2=0 a3=7fffce8b378c items=0 ppid=2217 pid=6064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:19:09.383000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:19:09.392000 audit[6064]: NETFILTER_CFG table=nat:139 family=2 entries=96 op=nft_register_chain pid=6064 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:19:09.392000 audit[6064]: SYSCALL arch=c000003e syscall=46 success=yes exit=45612 a0=3 a1=7fffce8b37a0 a2=0 a3=7fffce8b378c items=0 ppid=2217 pid=6064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:19:09.392000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:19:19.125000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:19.836406 kernel: audit: type=1400 audit(1752535159.125:1681): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:19.893337 kernel: audit: type=1300 audit(1752535159.125:1681): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c003031a70 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:19:19.893411 kernel: audit: type=1327 audit(1752535159.125:1681): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:19.898720 kernel: audit: type=1400 audit(1752535159.145:1682): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:19.905792 kernel: audit: type=1300 audit(1752535159.145:1682): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d30c80 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:19:19.911817 kernel: audit: type=1327 audit(1752535159.145:1682): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:19.125000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c003031a70 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:19:19.125000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:19.145000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:19.145000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d30c80 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:19:19.145000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:36.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.104:22-185.255.90.238:45436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:19:36.498178 kernel: audit: type=1130 audit(1752535176.248:1683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.104:22-185.255.90.238:45436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:19:36.229169 systemd[1]: Started sshd@21-139.178.70.104:22-185.255.90.238:45436.service. Jul 14 23:19:36.764000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:36.800477 kernel: audit: type=1400 audit(1752535176.764:1684): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:36.804305 kernel: audit: type=1300 audit(1752535176.764:1684): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d31720 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:19:36.804357 kernel: audit: type=1327 audit(1752535176.764:1684): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:36.804377 kernel: audit: type=1400 audit(1752535176.779:1685): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:36.804392 kernel: audit: type=1300 audit(1752535176.779:1685): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d31760 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:19:36.804406 kernel: audit: type=1327 audit(1752535176.779:1685): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:36.804422 kernel: audit: type=1400 audit(1752535176.799:1686): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:36.804439 kernel: audit: type=1300 audit(1752535176.799:1686): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000d31b60 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:19:36.764000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d31720 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:19:36.823738 kernel: audit: type=1327 audit(1752535176.799:1686): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:36.764000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:36.779000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:36.779000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d31760 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:19:36.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:36.799000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:36.799000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000d31b60 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:19:36.799000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:36.811000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:36.811000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d31ba0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:19:36.811000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:37.991239 sshd[6084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.255.90.238 user=root Jul 14 23:19:37.990000 audit[6084]: USER_AUTH pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.255.90.238 addr=185.255.90.238 terminal=ssh res=failed' Jul 14 23:19:40.157128 sshd[6084]: Failed password for root from 185.255.90.238 port 45436 ssh2 Jul 14 23:19:40.862170 sshd[6084]: Received disconnect from 185.255.90.238 port 45436:11: Bye Bye [preauth] Jul 14 23:19:40.862170 sshd[6084]: Disconnected from authenticating user root 185.255.90.238 port 45436 [preauth] Jul 14 23:19:40.914867 systemd[1]: sshd@21-139.178.70.104:22-185.255.90.238:45436.service: Deactivated successfully. Jul 14 23:19:40.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.104:22-185.255.90.238:45436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:19:44.539799 kubelet[2110]: I0714 23:18:48.354088 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"node-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:19:50.135298 kubelet[2110]: E0714 23:19:50.127424 2110 log.go:32] "Version from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 14 23:19:50.380114 kubelet[2110]: W0714 23:18:58.434281 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@14-139.178.70.104:22-14.103.170.138:37986.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@14-139.178.70.104:22-14.103.170.138:37986.service: no such file or directory Jul 14 23:19:54.180000 audit[4168]: AVC avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:19:54.455533 kernel: kauditd_printk_skb: 5 callbacks suppressed Jul 14 23:19:54.473535 kernel: audit: type=1400 audit(1752535194.180:1690): avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:19:54.482467 kernel: audit: type=1300 audit(1752535194.180:1690): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002882100 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:19:54.482552 kernel: audit: type=1327 audit(1752535194.180:1690): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:19:54.180000 audit[4168]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002882100 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:19:54.180000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:19:56.461000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.617367 kernel: audit: type=1400 audit(1752535196.461:1691): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.626480 kernel: audit: type=1300 audit(1752535196.461:1691): arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c0081267c0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:19:56.626551 kernel: audit: type=1327 audit(1752535196.461:1691): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:56.627572 kernel: audit: type=1400 audit(1752535196.488:1692): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.627607 kernel: audit: type=1300 audit(1752535196.488:1692): arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c010f13bf0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:19:56.627630 kernel: audit: type=1327 audit(1752535196.488:1692): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:56.628993 kernel: audit: type=1400 audit(1752535196.501:1693): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.461000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c0081267c0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:19:56.461000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:56.488000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.488000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c010f13bf0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:19:56.488000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:56.501000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.501000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c012f28000 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:19:56.501000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:56.542000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.542000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00a150640 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:19:56.542000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:56.547000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.547000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c010f13fb0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:19:56.547000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:56.631000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.631000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c012f281e0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:19:56.631000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:58.155000 audit[4352]: AVC avc: denied { watch } for pid=4352 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.1792147082/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c468,c664 tclass=file permissive=0 Jul 14 23:19:58.155000 audit[4352]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001fd2120 a2=fc6 a3=0 items=0 ppid=4296 pid=4352 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c468,c664 key=(null) Jul 14 23:19:58.155000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:20:19.375000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:19.775439 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 14 23:20:19.844730 kernel: audit: type=1400 audit(1752535219.375:1698): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:19.850586 kernel: audit: type=1300 audit(1752535219.375:1698): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0024167e0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:20:19.867489 kernel: audit: type=1327 audit(1752535219.375:1698): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:19.875152 kernel: audit: type=1400 audit(1752535219.376:1699): avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:19.875204 kernel: audit: type=1300 audit(1752535219.376:1699): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001bff2f0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:20:19.875232 kernel: audit: type=1327 audit(1752535219.376:1699): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:19.375000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0024167e0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:20:19.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:19.376000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:19.376000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001bff2f0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:20:19.376000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:35.110594 sshd[6046]: pam_unix(sshd:session): session closed for user core Jul 14 23:20:35.272178 kernel: audit: type=1106 audit(1752535235.178:1700): pid=6046 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:35.279893 kernel: audit: type=1104 audit(1752535235.180:1701): pid=6046 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:35.279941 kernel: audit: type=1130 audit(1752535235.211:1702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.104:22-139.178.89.65:53660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:35.279972 kernel: audit: type=1131 audit(1752535235.216:1703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.104:22-139.178.89.65:49470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:35.178000 audit[6046]: USER_END pid=6046 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:35.180000 audit[6046]: CRED_DISP pid=6046 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:35.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.104:22-139.178.89.65:53660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:35.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.104:22-139.178.89.65:49470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:35.212221 systemd[1]: Started sshd@22-139.178.70.104:22-139.178.89.65:53660.service. Jul 14 23:20:35.217042 systemd[1]: sshd@20-139.178.70.104:22-139.178.89.65:49470.service: Deactivated successfully. Jul 14 23:20:35.217725 systemd[1]: session-17.scope: Deactivated successfully. Jul 14 23:20:35.217858 systemd[1]: session-17.scope: Consumed 6.821s CPU time. Jul 14 23:20:35.218320 systemd-logind[1235]: Session 17 logged out. Waiting for processes to exit. Jul 14 23:20:35.219041 systemd-logind[1235]: Removed session 17. Jul 14 23:20:35.428000 audit[6105]: USER_ACCT pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:35.434167 kernel: audit: type=1101 audit(1752535235.428:1704): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:35.434286 sshd[6105]: Accepted publickey for core from 139.178.89.65 port 53660 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:20:35.439996 kernel: audit: type=1103 audit(1752535235.433:1705): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:35.440041 kernel: audit: type=1006 audit(1752535235.433:1706): pid=6105 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 14 23:20:35.433000 audit[6105]: CRED_ACQ pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:35.433000 audit[6105]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8af24060 a2=3 a3=0 items=0 ppid=1 pid=6105 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:35.495368 kernel: audit: type=1300 audit(1752535235.433:1706): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8af24060 a2=3 a3=0 items=0 ppid=1 pid=6105 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:35.495458 kernel: audit: type=1327 audit(1752535235.433:1706): proctitle=737368643A20636F7265205B707269765D Jul 14 23:20:35.433000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:20:35.451383 sshd[6105]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:20:35.574127 systemd-logind[1235]: New session 18 of user core. Jul 14 23:20:35.574784 systemd[1]: Started session-18.scope. Jul 14 23:20:35.584000 audit[6105]: USER_START pid=6105 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:35.591810 kernel: audit: type=1105 audit(1752535235.584:1707): pid=6105 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:35.589000 audit[6108]: CRED_ACQ pid=6108 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:36.921000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:36.921000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c000e41880 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:20:36.921000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:36.927000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:36.927000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002774800 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:20:36.927000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:36.933000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:36.933000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e418c0 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:20:36.933000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:36.986000 audit[5729]: AVC avc: denied { watch } for pid=5729 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:36.986000 audit[5729]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e41b80 a2=fc6 a3=0 items=0 ppid=1794 pid=5729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c513 key=(null) Jul 14 23:20:36.986000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:43.117320 kubelet[2110]: E0714 23:19:48.072402 2110 log.go:32] "ListImages with filter from image service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" filter="nil" Jul 14 23:20:47.477677 systemd[1]: Started sshd@23-139.178.70.104:22-185.255.90.238:54896.service. Jul 14 23:20:47.574734 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 14 23:20:47.581002 kernel: audit: type=1130 audit(1752535247.479:1713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.104:22-185.255.90.238:54896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:47.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.104:22-185.255.90.238:54896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:48.982462 sshd[6129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.255.90.238 user=root Jul 14 23:20:49.038208 kernel: audit: type=1100 audit(1752535248.981:1714): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.255.90.238 addr=185.255.90.238 terminal=ssh res=failed' Jul 14 23:20:48.981000 audit[6129]: USER_AUTH pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.255.90.238 addr=185.255.90.238 terminal=ssh res=failed' Jul 14 23:20:49.620318 kubelet[2110]: E0714 23:20:46.413202 2110 log.go:32] "ListImages with filter from image service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" filter="nil" Jul 14 23:20:50.103136 kubelet[2110]: E0714 23:20:42.081843 2110 log.go:32] "Status from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 14 23:20:50.134423 kubelet[2110]: E0714 23:19:49.677283 2110 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="bbc81024144fad3b13550f07a396af3f2380da5ba523d5969e7dbd221c59395f" cmd=["/health","-ready"] Jul 14 23:20:50.200877 kubelet[2110]: E0714 23:20:50.196589 2110 kuberuntime_image.go:104] "Failed to list images" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 14 23:20:50.200877 kubelet[2110]: I0714 23:20:50.196649 2110 image_gc_manager.go:222] "Failed to monitor images" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 14 23:20:50.709476 kubelet[2110]: E0714 23:19:49.231317 2110 log.go:32] "ListContainers with filter from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" filter="&ContainerFilter{Id:,State:nil,PodSandboxId:,LabelSelector:map[string]string{},}" Jul 14 23:20:50.714054 kubelet[2110]: E0714 23:20:50.709502 2110 container_log_manager.go:197] "Failed to rotate container logs" err="failed to list containers: rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 14 23:20:50.793037 kubelet[2110]: W0714 23:20:33.638599 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@15-139.178.70.104:22-185.255.90.238:48324.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@15-139.178.70.104:22-185.255.90.238:48324.service: no such file or directory Jul 14 23:20:50.806091 kubelet[2110]: E0714 23:20:41.264531 2110 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="0fe4d0dd5ab9b603c144e181cc74daeaa790082b5c62ddea61a150a76e383f6e" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Jul 14 23:20:50.869345 sshd[6129]: Failed password for root from 185.255.90.238 port 54896 ssh2 Jul 14 23:20:51.091122 kubelet[2110]: E0714 23:20:51.091074 2110 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="0fe4d0dd5ab9b603c144e181cc74daeaa790082b5c62ddea61a150a76e383f6e" Jul 14 23:20:51.093910 kubelet[2110]: E0714 23:20:51.091130 2110 container_log_manager.go:274] "Failed to get container status" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" worker=1 containerID="0fe4d0dd5ab9b603c144e181cc74daeaa790082b5c62ddea61a150a76e383f6e" Jul 14 23:20:51.184952 kubelet[2110]: E0714 23:20:51.184924 2110 kuberuntime_image.go:104] "Failed to list images" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 14 23:20:51.418311 kubelet[2110]: E0714 23:20:51.408549 2110 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="bbc81024144fad3b13550f07a396af3f2380da5ba523d5969e7dbd221c59395f" cmd=["/health","-live"] Jul 14 23:20:51.941524 sshd[6129]: Received disconnect from 185.255.90.238 port 54896:11: Bye Bye [preauth] Jul 14 23:20:51.941524 sshd[6129]: Disconnected from authenticating user root 185.255.90.238 port 54896 [preauth] Jul 14 23:20:52.036012 systemd[1]: sshd@23-139.178.70.104:22-185.255.90.238:54896.service: Deactivated successfully. Jul 14 23:20:52.077179 kernel: audit: type=1131 audit(1752535252.049:1715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.104:22-185.255.90.238:54896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:52.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.104:22-185.255.90.238:54896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:54.252170 sshd[6105]: pam_unix(sshd:session): session closed for user core Jul 14 23:20:54.417676 kernel: audit: type=1106 audit(1752535254.327:1716): pid=6105 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:54.419808 kernel: audit: type=1104 audit(1752535254.331:1717): pid=6105 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:54.419850 kernel: audit: type=1400 audit(1752535254.385:1718): avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:20:54.421422 kernel: audit: type=1300 audit(1752535254.385:1718): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0028822e0 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:20:54.421448 kernel: audit: type=1327 audit(1752535254.385:1718): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:20:54.425161 kernel: audit: type=1131 audit(1752535254.389:1719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.104:22-139.178.89.65:53660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:54.327000 audit[6105]: USER_END pid=6105 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:54.331000 audit[6105]: CRED_DISP pid=6105 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:54.385000 audit[4168]: AVC avc: denied { watch } for pid=4168 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.480377616/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c814,c1017 tclass=file permissive=0 Jul 14 23:20:54.385000 audit[4168]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0028822e0 a2=fc6 a3=0 items=0 ppid=3576 pid=4168 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c1017 key=(null) Jul 14 23:20:54.385000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:20:54.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.104:22-139.178.89.65:53660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:54.378295 systemd[1]: sshd@22-139.178.70.104:22-139.178.89.65:53660.service: Deactivated successfully. Jul 14 23:20:54.396317 systemd[1]: session-18.scope: Deactivated successfully. Jul 14 23:20:54.396433 systemd[1]: session-18.scope: Consumed 2.207s CPU time. Jul 14 23:20:54.400812 systemd-logind[1235]: Session 18 logged out. Waiting for processes to exit. Jul 14 23:20:54.420752 systemd-logind[1235]: Removed session 18. Jul 14 23:20:55.250822 kubelet[2110]: I0714 23:20:51.599839 2110 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"calico-apiserver-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 14 23:20:55.698291 kubelet[2110]: E0714 23:20:55.693041 2110 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 14 23:20:56.150101 kubelet[2110]: E0714 23:20:44.462712 2110 log.go:32] "ListPodSandbox with filter from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" filter="&PodSandboxFilter{Id:,State:&PodSandboxStateValue{State:SANDBOX_READY,},LabelSelector:map[string]string{},}" Jul 14 23:20:56.342068 kubelet[2110]: W0714 23:20:55.534977 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@16-139.178.70.104:22-139.178.89.65:54044.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@16-139.178.70.104:22-139.178.89.65:54044.service: no such file or directory Jul 14 23:20:56.410461 kubelet[2110]: E0714 23:20:56.410384 2110 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="546ce2ce3dcf54230cf3d7886316a79c2cc9a23a07ab2f84d7984d45e2453014" cmd=["/usr/bin/check-status","-r"] Jul 14 23:20:56.429935 kubelet[2110]: W0714 23:20:56.428884 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-14.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-14.scope: no such file or directory Jul 14 23:20:56.430197 kubelet[2110]: W0714 23:20:56.430178 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@17-139.178.70.104:22-185.255.90.238:45714.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@17-139.178.70.104:22-185.255.90.238:45714.service: no such file or directory Jul 14 23:20:56.431130 kubelet[2110]: W0714 23:20:56.430259 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@18-139.178.70.104:22-139.178.89.65:51678.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@18-139.178.70.104:22-139.178.89.65:51678.service: no such file or directory Jul 14 23:20:56.431130 kubelet[2110]: W0714 23:20:56.430277 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-15.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-15.scope: no such file or directory Jul 14 23:20:56.431130 kubelet[2110]: W0714 23:20:56.430286 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@19-139.178.70.104:22-139.178.89.65:51682.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@19-139.178.70.104:22-139.178.89.65:51682.service: no such file or directory Jul 14 23:20:56.431130 kubelet[2110]: W0714 23:20:56.430314 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-16.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-16.scope: no such file or directory Jul 14 23:20:56.431130 kubelet[2110]: W0714 23:20:56.430328 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@20-139.178.70.104:22-139.178.89.65:49470.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@20-139.178.70.104:22-139.178.89.65:49470.service: no such file or directory Jul 14 23:20:56.431130 kubelet[2110]: W0714 23:20:56.430337 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-17.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-17.scope: no such file or directory Jul 14 23:20:56.441874 kubelet[2110]: W0714 23:20:56.430402 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@21-139.178.70.104:22-185.255.90.238:45436.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@21-139.178.70.104:22-185.255.90.238:45436.service: no such file or directory Jul 14 23:20:56.441874 kubelet[2110]: W0714 23:20:56.430415 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@22-139.178.70.104:22-139.178.89.65:53660.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@22-139.178.70.104:22-139.178.89.65:53660.service: no such file or directory Jul 14 23:20:56.441874 kubelet[2110]: W0714 23:20:56.430423 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-18.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-18.scope: no such file or directory Jul 14 23:20:56.441874 kubelet[2110]: W0714 23:20:56.430432 2110 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@23-139.178.70.104:22-185.255.90.238:54896.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@23-139.178.70.104:22-185.255.90.238:54896.service: no such file or directory Jul 14 23:20:56.617965 kernel: audit: type=1400 audit(1752535256.613:1720): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:56.648413 kernel: audit: type=1300 audit(1752535256.613:1720): arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c004d1bec0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null) Jul 14 23:20:56.653946 kernel: audit: type=1327 audit(1752535256.613:1720): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:20:56.653985 kernel: audit: type=1400 audit(1752535256.615:1721): avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:56.613000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:56.613000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c004d1bec0 a2=fc6 a3=0 items=0 ppid=1811 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c1,c453 key=(null)