Jul 14 22:08:27.739445 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 14 22:08:27.739464 kernel: Linux version 5.15.187-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Jul 14 20:49:56 -00 2025 Jul 14 22:08:27.739472 kernel: efi: EFI v2.70 by EDK II Jul 14 22:08:27.739478 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 14 22:08:27.739482 kernel: random: crng init done Jul 14 22:08:27.739488 kernel: ACPI: Early table checksum verification disabled Jul 14 22:08:27.739494 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 14 22:08:27.739501 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 14 22:08:27.739507 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:08:27.739512 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:08:27.739517 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:08:27.739523 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:08:27.739528 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:08:27.739533 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:08:27.739541 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:08:27.739547 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:08:27.739553 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:08:27.739558 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 14 22:08:27.739564 kernel: NUMA: Failed to initialise from firmware Jul 14 22:08:27.739569 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 14 22:08:27.739575 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Jul 14 22:08:27.739581 kernel: Zone ranges: Jul 14 22:08:27.739586 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 14 22:08:27.739593 kernel: DMA32 empty Jul 14 22:08:27.739598 kernel: Normal empty Jul 14 22:08:27.739604 kernel: Movable zone start for each node Jul 14 22:08:27.739609 kernel: Early memory node ranges Jul 14 22:08:27.739615 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 14 22:08:27.739620 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 14 22:08:27.739626 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 14 22:08:27.739631 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 14 22:08:27.739637 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 14 22:08:27.739643 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 14 22:08:27.739648 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 14 22:08:27.739654 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 14 22:08:27.739661 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 14 22:08:27.739666 kernel: psci: probing for conduit method from ACPI. Jul 14 22:08:27.739672 kernel: psci: PSCIv1.1 detected in firmware. Jul 14 22:08:27.739677 kernel: psci: Using standard PSCI v0.2 function IDs Jul 14 22:08:27.739683 kernel: psci: Trusted OS migration not required Jul 14 22:08:27.739691 kernel: psci: SMC Calling Convention v1.1 Jul 14 22:08:27.739697 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 14 22:08:27.739705 kernel: ACPI: SRAT not present Jul 14 22:08:27.739711 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 14 22:08:27.739717 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 14 22:08:27.739724 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 14 22:08:27.739730 kernel: Detected PIPT I-cache on CPU0 Jul 14 22:08:27.739736 kernel: CPU features: detected: GIC system register CPU interface Jul 14 22:08:27.739742 kernel: CPU features: detected: Hardware dirty bit management Jul 14 22:08:27.739748 kernel: CPU features: detected: Spectre-v4 Jul 14 22:08:27.739754 kernel: CPU features: detected: Spectre-BHB Jul 14 22:08:27.739761 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 14 22:08:27.739767 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 14 22:08:27.739773 kernel: CPU features: detected: ARM erratum 1418040 Jul 14 22:08:27.739779 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 14 22:08:27.739785 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 14 22:08:27.739790 kernel: Policy zone: DMA Jul 14 22:08:27.739797 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=0fbac260ee8dcd4db6590eed44229ca41387b27ea0fa758fd2be410620d68236 Jul 14 22:08:27.739804 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 14 22:08:27.739810 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 14 22:08:27.739816 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 14 22:08:27.739822 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 14 22:08:27.739830 kernel: Memory: 2457340K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114948K reserved, 0K cma-reserved) Jul 14 22:08:27.739836 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 14 22:08:27.739842 kernel: trace event string verifier disabled Jul 14 22:08:27.739848 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 14 22:08:27.739854 kernel: rcu: RCU event tracing is enabled. Jul 14 22:08:27.739861 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 14 22:08:27.739867 kernel: Trampoline variant of Tasks RCU enabled. Jul 14 22:08:27.739873 kernel: Tracing variant of Tasks RCU enabled. Jul 14 22:08:27.739879 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 14 22:08:27.739885 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 14 22:08:27.739891 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 14 22:08:27.739906 kernel: GICv3: 256 SPIs implemented Jul 14 22:08:27.739912 kernel: GICv3: 0 Extended SPIs implemented Jul 14 22:08:27.739918 kernel: GICv3: Distributor has no Range Selector support Jul 14 22:08:27.739924 kernel: Root IRQ handler: gic_handle_irq Jul 14 22:08:27.739930 kernel: GICv3: 16 PPIs implemented Jul 14 22:08:27.739936 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 14 22:08:27.739942 kernel: ACPI: SRAT not present Jul 14 22:08:27.739948 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 14 22:08:27.739954 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 14 22:08:27.739960 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 14 22:08:27.739966 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 14 22:08:27.739972 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 14 22:08:27.739980 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 14 22:08:27.739986 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 14 22:08:27.739992 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 14 22:08:27.739998 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 14 22:08:27.740004 kernel: arm-pv: using stolen time PV Jul 14 22:08:27.740010 kernel: Console: colour dummy device 80x25 Jul 14 22:08:27.740017 kernel: ACPI: Core revision 20210730 Jul 14 22:08:27.740023 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 14 22:08:27.740029 kernel: pid_max: default: 32768 minimum: 301 Jul 14 22:08:27.740036 kernel: LSM: Security Framework initializing Jul 14 22:08:27.740043 kernel: SELinux: Initializing. Jul 14 22:08:27.740049 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 14 22:08:27.740056 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 14 22:08:27.740062 kernel: rcu: Hierarchical SRCU implementation. Jul 14 22:08:27.740068 kernel: Platform MSI: ITS@0x8080000 domain created Jul 14 22:08:27.740074 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 14 22:08:27.740080 kernel: Remapping and enabling EFI services. Jul 14 22:08:27.740086 kernel: smp: Bringing up secondary CPUs ... Jul 14 22:08:27.740092 kernel: Detected PIPT I-cache on CPU1 Jul 14 22:08:27.740100 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 14 22:08:27.740106 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 14 22:08:27.740113 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 14 22:08:27.740119 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 14 22:08:27.740125 kernel: Detected PIPT I-cache on CPU2 Jul 14 22:08:27.740132 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 14 22:08:27.740138 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 14 22:08:27.740145 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 14 22:08:27.740151 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 14 22:08:27.740157 kernel: Detected PIPT I-cache on CPU3 Jul 14 22:08:27.740164 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 14 22:08:27.740170 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 14 22:08:27.740177 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 14 22:08:27.740183 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 14 22:08:27.740193 kernel: smp: Brought up 1 node, 4 CPUs Jul 14 22:08:27.740201 kernel: SMP: Total of 4 processors activated. Jul 14 22:08:27.740208 kernel: CPU features: detected: 32-bit EL0 Support Jul 14 22:08:27.740214 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 14 22:08:27.740221 kernel: CPU features: detected: Common not Private translations Jul 14 22:08:27.740227 kernel: CPU features: detected: CRC32 instructions Jul 14 22:08:27.740234 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 14 22:08:27.740240 kernel: CPU features: detected: LSE atomic instructions Jul 14 22:08:27.740248 kernel: CPU features: detected: Privileged Access Never Jul 14 22:08:27.740255 kernel: CPU features: detected: RAS Extension Support Jul 14 22:08:27.740261 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 14 22:08:27.740268 kernel: CPU: All CPU(s) started at EL1 Jul 14 22:08:27.740274 kernel: alternatives: patching kernel code Jul 14 22:08:27.740282 kernel: devtmpfs: initialized Jul 14 22:08:27.740288 kernel: KASLR enabled Jul 14 22:08:27.740295 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 14 22:08:27.740301 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 14 22:08:27.740308 kernel: pinctrl core: initialized pinctrl subsystem Jul 14 22:08:27.740314 kernel: SMBIOS 3.0.0 present. Jul 14 22:08:27.740321 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 14 22:08:27.740327 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 14 22:08:27.740334 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 14 22:08:27.740342 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 14 22:08:27.740348 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 14 22:08:27.740359 kernel: audit: initializing netlink subsys (disabled) Jul 14 22:08:27.740366 kernel: audit: type=2000 audit(0.030:1): state=initialized audit_enabled=0 res=1 Jul 14 22:08:27.740373 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 14 22:08:27.740379 kernel: cpuidle: using governor menu Jul 14 22:08:27.740386 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 14 22:08:27.740392 kernel: ASID allocator initialised with 32768 entries Jul 14 22:08:27.740399 kernel: ACPI: bus type PCI registered Jul 14 22:08:27.740407 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 14 22:08:27.740413 kernel: Serial: AMBA PL011 UART driver Jul 14 22:08:27.740420 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 14 22:08:27.740426 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 14 22:08:27.740433 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 14 22:08:27.740440 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 14 22:08:27.740446 kernel: cryptd: max_cpu_qlen set to 1000 Jul 14 22:08:27.740453 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 14 22:08:27.740459 kernel: ACPI: Added _OSI(Module Device) Jul 14 22:08:27.740467 kernel: ACPI: Added _OSI(Processor Device) Jul 14 22:08:27.740474 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 14 22:08:27.740480 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 14 22:08:27.740487 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 14 22:08:27.740493 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 14 22:08:27.740500 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 14 22:08:27.740506 kernel: ACPI: Interpreter enabled Jul 14 22:08:27.740513 kernel: ACPI: Using GIC for interrupt routing Jul 14 22:08:27.740519 kernel: ACPI: MCFG table detected, 1 entries Jul 14 22:08:27.740527 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 14 22:08:27.740534 kernel: printk: console [ttyAMA0] enabled Jul 14 22:08:27.740541 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 14 22:08:27.740647 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 14 22:08:27.740713 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 14 22:08:27.740769 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 14 22:08:27.740825 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 14 22:08:27.740883 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 14 22:08:27.740892 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 14 22:08:27.740904 kernel: PCI host bridge to bus 0000:00 Jul 14 22:08:27.740971 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 14 22:08:27.741024 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 14 22:08:27.741075 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 14 22:08:27.741125 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 14 22:08:27.741197 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 14 22:08:27.741267 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 14 22:08:27.744995 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 14 22:08:27.745067 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 14 22:08:27.745127 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 14 22:08:27.745185 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 14 22:08:27.745244 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 14 22:08:27.745308 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 14 22:08:27.745374 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 14 22:08:27.745427 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 14 22:08:27.745478 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 14 22:08:27.745486 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 14 22:08:27.745493 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 14 22:08:27.745500 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 14 22:08:27.745507 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 14 22:08:27.745515 kernel: iommu: Default domain type: Translated Jul 14 22:08:27.745522 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 14 22:08:27.745528 kernel: vgaarb: loaded Jul 14 22:08:27.745535 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 14 22:08:27.745542 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 14 22:08:27.745548 kernel: PTP clock support registered Jul 14 22:08:27.745555 kernel: Registered efivars operations Jul 14 22:08:27.745562 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 14 22:08:27.745568 kernel: VFS: Disk quotas dquot_6.6.0 Jul 14 22:08:27.745576 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 14 22:08:27.745583 kernel: pnp: PnP ACPI init Jul 14 22:08:27.745646 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 14 22:08:27.745655 kernel: pnp: PnP ACPI: found 1 devices Jul 14 22:08:27.745662 kernel: NET: Registered PF_INET protocol family Jul 14 22:08:27.745669 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 14 22:08:27.745676 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 14 22:08:27.745683 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 14 22:08:27.745691 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 14 22:08:27.745697 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 14 22:08:27.745704 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 14 22:08:27.745711 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 14 22:08:27.745717 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 14 22:08:27.745724 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 14 22:08:27.745730 kernel: PCI: CLS 0 bytes, default 64 Jul 14 22:08:27.745737 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 14 22:08:27.745744 kernel: kvm [1]: HYP mode not available Jul 14 22:08:27.745751 kernel: Initialise system trusted keyrings Jul 14 22:08:27.745758 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 14 22:08:27.745764 kernel: Key type asymmetric registered Jul 14 22:08:27.745771 kernel: Asymmetric key parser 'x509' registered Jul 14 22:08:27.745778 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 14 22:08:27.745784 kernel: io scheduler mq-deadline registered Jul 14 22:08:27.745791 kernel: io scheduler kyber registered Jul 14 22:08:27.745797 kernel: io scheduler bfq registered Jul 14 22:08:27.745804 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 14 22:08:27.745812 kernel: ACPI: button: Power Button [PWRB] Jul 14 22:08:27.745819 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 14 22:08:27.745876 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 14 22:08:27.745884 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 14 22:08:27.745891 kernel: thunder_xcv, ver 1.0 Jul 14 22:08:27.745951 kernel: thunder_bgx, ver 1.0 Jul 14 22:08:27.745959 kernel: nicpf, ver 1.0 Jul 14 22:08:27.745966 kernel: nicvf, ver 1.0 Jul 14 22:08:27.746041 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 14 22:08:27.746214 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-14T22:08:27 UTC (1752530907) Jul 14 22:08:27.746226 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 14 22:08:27.746233 kernel: NET: Registered PF_INET6 protocol family Jul 14 22:08:27.746240 kernel: Segment Routing with IPv6 Jul 14 22:08:27.746246 kernel: In-situ OAM (IOAM) with IPv6 Jul 14 22:08:27.746253 kernel: NET: Registered PF_PACKET protocol family Jul 14 22:08:27.746260 kernel: Key type dns_resolver registered Jul 14 22:08:27.746266 kernel: registered taskstats version 1 Jul 14 22:08:27.746275 kernel: Loading compiled-in X.509 certificates Jul 14 22:08:27.746282 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.187-flatcar: 118351bb2b1409a8fe1c98db16ecff1bb5342a27' Jul 14 22:08:27.746289 kernel: Key type .fscrypt registered Jul 14 22:08:27.746295 kernel: Key type fscrypt-provisioning registered Jul 14 22:08:27.746302 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 14 22:08:27.746308 kernel: ima: Allocated hash algorithm: sha1 Jul 14 22:08:27.746315 kernel: ima: No architecture policies found Jul 14 22:08:27.746322 kernel: clk: Disabling unused clocks Jul 14 22:08:27.746328 kernel: Freeing unused kernel memory: 36416K Jul 14 22:08:27.746336 kernel: Run /init as init process Jul 14 22:08:27.746343 kernel: with arguments: Jul 14 22:08:27.746349 kernel: /init Jul 14 22:08:27.746360 kernel: with environment: Jul 14 22:08:27.746368 kernel: HOME=/ Jul 14 22:08:27.746374 kernel: TERM=linux Jul 14 22:08:27.746380 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 14 22:08:27.746389 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 22:08:27.746399 systemd[1]: Detected virtualization kvm. Jul 14 22:08:27.746406 systemd[1]: Detected architecture arm64. Jul 14 22:08:27.746413 systemd[1]: Running in initrd. Jul 14 22:08:27.746420 systemd[1]: No hostname configured, using default hostname. Jul 14 22:08:27.746427 systemd[1]: Hostname set to . Jul 14 22:08:27.746434 systemd[1]: Initializing machine ID from VM UUID. Jul 14 22:08:27.746441 systemd[1]: Queued start job for default target initrd.target. Jul 14 22:08:27.746448 systemd[1]: Started systemd-ask-password-console.path. Jul 14 22:08:27.746456 systemd[1]: Reached target cryptsetup.target. Jul 14 22:08:27.746463 systemd[1]: Reached target paths.target. Jul 14 22:08:27.746469 systemd[1]: Reached target slices.target. Jul 14 22:08:27.746476 systemd[1]: Reached target swap.target. Jul 14 22:08:27.746483 systemd[1]: Reached target timers.target. Jul 14 22:08:27.746490 systemd[1]: Listening on iscsid.socket. Jul 14 22:08:27.746497 systemd[1]: Listening on iscsiuio.socket. Jul 14 22:08:27.746506 systemd[1]: Listening on systemd-journald-audit.socket. Jul 14 22:08:27.746513 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 14 22:08:27.746520 systemd[1]: Listening on systemd-journald.socket. Jul 14 22:08:27.746526 systemd[1]: Listening on systemd-networkd.socket. Jul 14 22:08:27.746533 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 22:08:27.746540 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 22:08:27.746547 systemd[1]: Reached target sockets.target. Jul 14 22:08:27.746554 systemd[1]: Starting kmod-static-nodes.service... Jul 14 22:08:27.746561 systemd[1]: Finished network-cleanup.service. Jul 14 22:08:27.746569 systemd[1]: Starting systemd-fsck-usr.service... Jul 14 22:08:27.746576 systemd[1]: Starting systemd-journald.service... Jul 14 22:08:27.746583 systemd[1]: Starting systemd-modules-load.service... Jul 14 22:08:27.746590 systemd[1]: Starting systemd-resolved.service... Jul 14 22:08:27.746597 systemd[1]: Starting systemd-vconsole-setup.service... Jul 14 22:08:27.746604 systemd[1]: Finished kmod-static-nodes.service. Jul 14 22:08:27.746611 systemd[1]: Finished systemd-fsck-usr.service. Jul 14 22:08:27.746618 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 14 22:08:27.746624 systemd[1]: Finished systemd-vconsole-setup.service. Jul 14 22:08:27.746633 kernel: audit: type=1130 audit(1752530907.738:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.746640 systemd[1]: Starting dracut-cmdline-ask.service... Jul 14 22:08:27.746647 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 14 22:08:27.746657 systemd-journald[290]: Journal started Jul 14 22:08:27.746695 systemd-journald[290]: Runtime Journal (/run/log/journal/e6b2664555bc4a90a54bb9913d75f557) is 6.0M, max 48.7M, 42.6M free. Jul 14 22:08:27.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.736061 systemd-modules-load[291]: Inserted module 'overlay' Jul 14 22:08:27.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.753642 kernel: audit: type=1130 audit(1752530907.748:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.753672 systemd[1]: Started systemd-journald.service. Jul 14 22:08:27.753684 kernel: audit: type=1130 audit(1752530907.752:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.758922 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 14 22:08:27.761338 systemd[1]: Finished dracut-cmdline-ask.service. Jul 14 22:08:27.765663 kernel: Bridge firewalling registered Jul 14 22:08:27.765679 kernel: audit: type=1130 audit(1752530907.762:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.762613 systemd-modules-load[291]: Inserted module 'br_netfilter' Jul 14 22:08:27.763743 systemd-resolved[292]: Positive Trust Anchors: Jul 14 22:08:27.763750 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 22:08:27.763776 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 22:08:27.776055 kernel: SCSI subsystem initialized Jul 14 22:08:27.766342 systemd[1]: Starting dracut-cmdline.service... Jul 14 22:08:27.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.768083 systemd-resolved[292]: Defaulting to hostname 'linux'. Jul 14 22:08:27.783584 kernel: audit: type=1130 audit(1752530907.776:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.783602 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 14 22:08:27.783611 kernel: device-mapper: uevent: version 1.0.3 Jul 14 22:08:27.783620 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 14 22:08:27.769575 systemd[1]: Started systemd-resolved.service. Jul 14 22:08:27.785675 dracut-cmdline[308]: dracut-dracut-053 Jul 14 22:08:27.785675 dracut-cmdline[308]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=0fbac260ee8dcd4db6590eed44229ca41387b27ea0fa758fd2be410620d68236 Jul 14 22:08:27.777179 systemd[1]: Reached target nss-lookup.target. Jul 14 22:08:27.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.786794 systemd-modules-load[291]: Inserted module 'dm_multipath' Jul 14 22:08:27.796881 kernel: audit: type=1130 audit(1752530907.791:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.787556 systemd[1]: Finished systemd-modules-load.service. Jul 14 22:08:27.795519 systemd[1]: Starting systemd-sysctl.service... Jul 14 22:08:27.803959 systemd[1]: Finished systemd-sysctl.service. Jul 14 22:08:27.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.807919 kernel: audit: type=1130 audit(1752530907.803:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.847922 kernel: Loading iSCSI transport class v2.0-870. Jul 14 22:08:27.859918 kernel: iscsi: registered transport (tcp) Jul 14 22:08:27.876196 kernel: iscsi: registered transport (qla4xxx) Jul 14 22:08:27.876209 kernel: QLogic iSCSI HBA Driver Jul 14 22:08:27.909774 systemd[1]: Finished dracut-cmdline.service. Jul 14 22:08:27.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.911538 systemd[1]: Starting dracut-pre-udev.service... Jul 14 22:08:27.914864 kernel: audit: type=1130 audit(1752530907.909:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:27.954932 kernel: raid6: neonx8 gen() 13727 MB/s Jul 14 22:08:27.971920 kernel: raid6: neonx8 xor() 10772 MB/s Jul 14 22:08:27.988917 kernel: raid6: neonx4 gen() 13557 MB/s Jul 14 22:08:28.005920 kernel: raid6: neonx4 xor() 11072 MB/s Jul 14 22:08:28.022911 kernel: raid6: neonx2 gen() 13095 MB/s Jul 14 22:08:28.039913 kernel: raid6: neonx2 xor() 10242 MB/s Jul 14 22:08:28.056915 kernel: raid6: neonx1 gen() 10614 MB/s Jul 14 22:08:28.073922 kernel: raid6: neonx1 xor() 8791 MB/s Jul 14 22:08:28.090926 kernel: raid6: int64x8 gen() 6263 MB/s Jul 14 22:08:28.107920 kernel: raid6: int64x8 xor() 3539 MB/s Jul 14 22:08:28.124927 kernel: raid6: int64x4 gen() 7229 MB/s Jul 14 22:08:28.141921 kernel: raid6: int64x4 xor() 3850 MB/s Jul 14 22:08:28.158932 kernel: raid6: int64x2 gen() 6146 MB/s Jul 14 22:08:28.175925 kernel: raid6: int64x2 xor() 3315 MB/s Jul 14 22:08:28.192920 kernel: raid6: int64x1 gen() 5041 MB/s Jul 14 22:08:28.210012 kernel: raid6: int64x1 xor() 2643 MB/s Jul 14 22:08:28.210054 kernel: raid6: using algorithm neonx8 gen() 13727 MB/s Jul 14 22:08:28.210081 kernel: raid6: .... xor() 10772 MB/s, rmw enabled Jul 14 22:08:28.211062 kernel: raid6: using neon recovery algorithm Jul 14 22:08:28.222267 kernel: xor: measuring software checksum speed Jul 14 22:08:28.222280 kernel: 8regs : 17188 MB/sec Jul 14 22:08:28.222289 kernel: 32regs : 20691 MB/sec Jul 14 22:08:28.225264 kernel: arm64_neon : 1701 MB/sec Jul 14 22:08:28.225284 kernel: xor: using function: 32regs (20691 MB/sec) Jul 14 22:08:28.278929 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 14 22:08:28.288989 systemd[1]: Finished dracut-pre-udev.service. Jul 14 22:08:28.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:28.292000 audit: BPF prog-id=7 op=LOAD Jul 14 22:08:28.292000 audit: BPF prog-id=8 op=LOAD Jul 14 22:08:28.292925 kernel: audit: type=1130 audit(1752530908.288:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:28.293121 systemd[1]: Starting systemd-udevd.service... Jul 14 22:08:28.308340 systemd-udevd[492]: Using default interface naming scheme 'v252'. Jul 14 22:08:28.311635 systemd[1]: Started systemd-udevd.service. Jul 14 22:08:28.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:28.314074 systemd[1]: Starting dracut-pre-trigger.service... Jul 14 22:08:28.325277 dracut-pre-trigger[503]: rd.md=0: removing MD RAID activation Jul 14 22:08:28.350493 systemd[1]: Finished dracut-pre-trigger.service. Jul 14 22:08:28.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:28.351969 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 22:08:28.385222 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 22:08:28.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:28.412417 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 14 22:08:28.418567 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 14 22:08:28.418580 kernel: GPT:9289727 != 19775487 Jul 14 22:08:28.418588 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 14 22:08:28.418597 kernel: GPT:9289727 != 19775487 Jul 14 22:08:28.418605 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 14 22:08:28.418613 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 22:08:28.434523 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 14 22:08:28.437011 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (548) Jul 14 22:08:28.435632 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 14 22:08:28.440438 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 14 22:08:28.443757 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 14 22:08:28.452606 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 22:08:28.454230 systemd[1]: Starting disk-uuid.service... Jul 14 22:08:28.459843 disk-uuid[563]: Primary Header is updated. Jul 14 22:08:28.459843 disk-uuid[563]: Secondary Entries is updated. Jul 14 22:08:28.459843 disk-uuid[563]: Secondary Header is updated. Jul 14 22:08:28.463927 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 22:08:28.471920 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 22:08:28.474917 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 22:08:29.477189 disk-uuid[564]: The operation has completed successfully. Jul 14 22:08:29.478331 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 22:08:29.509659 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 14 22:08:29.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.509748 systemd[1]: Finished disk-uuid.service. Jul 14 22:08:29.511303 systemd[1]: Starting verity-setup.service... Jul 14 22:08:29.526911 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 14 22:08:29.546533 systemd[1]: Found device dev-mapper-usr.device. Jul 14 22:08:29.548953 systemd[1]: Mounting sysusr-usr.mount... Jul 14 22:08:29.550659 systemd[1]: Finished verity-setup.service. Jul 14 22:08:29.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.599379 systemd[1]: Mounted sysusr-usr.mount. Jul 14 22:08:29.600187 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 14 22:08:29.601917 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 14 22:08:29.604477 systemd[1]: Starting ignition-setup.service... Jul 14 22:08:29.605762 systemd[1]: Starting parse-ip-for-networkd.service... Jul 14 22:08:29.616197 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 14 22:08:29.616235 kernel: BTRFS info (device vda6): using free space tree Jul 14 22:08:29.616246 kernel: BTRFS info (device vda6): has skinny extents Jul 14 22:08:29.630420 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 14 22:08:29.641025 systemd[1]: Finished ignition-setup.service. Jul 14 22:08:29.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.649100 systemd[1]: Starting ignition-fetch-offline.service... Jul 14 22:08:29.702087 systemd[1]: Finished parse-ip-for-networkd.service. Jul 14 22:08:29.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.702000 audit: BPF prog-id=9 op=LOAD Jul 14 22:08:29.704877 systemd[1]: Starting systemd-networkd.service... Jul 14 22:08:29.729521 systemd-networkd[739]: lo: Link UP Jul 14 22:08:29.729531 systemd-networkd[739]: lo: Gained carrier Jul 14 22:08:29.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.729929 systemd-networkd[739]: Enumeration completed Jul 14 22:08:29.730101 systemd-networkd[739]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 14 22:08:29.730233 systemd[1]: Started systemd-networkd.service. Jul 14 22:08:29.732480 systemd-networkd[739]: eth0: Link UP Jul 14 22:08:29.732483 systemd-networkd[739]: eth0: Gained carrier Jul 14 22:08:29.733131 systemd[1]: Reached target network.target. Jul 14 22:08:29.734828 systemd[1]: Starting iscsiuio.service... Jul 14 22:08:29.745200 systemd[1]: Started iscsiuio.service. Jul 14 22:08:29.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.747630 systemd[1]: Starting iscsid.service... Jul 14 22:08:29.751218 iscsid[744]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 14 22:08:29.751218 iscsid[744]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 14 22:08:29.751218 iscsid[744]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 14 22:08:29.751218 iscsid[744]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 14 22:08:29.751218 iscsid[744]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 14 22:08:29.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.759884 ignition[662]: Ignition 2.14.0 Jul 14 22:08:29.754998 systemd-networkd[739]: eth0: DHCPv4 address 10.0.0.118/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 14 22:08:29.766544 iscsid[744]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 14 22:08:29.759891 ignition[662]: Stage: fetch-offline Jul 14 22:08:29.755661 systemd[1]: Started iscsid.service. Jul 14 22:08:29.759944 ignition[662]: no configs at "/usr/lib/ignition/base.d" Jul 14 22:08:29.759887 systemd[1]: Starting dracut-initqueue.service... Jul 14 22:08:29.759952 ignition[662]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:08:29.760084 ignition[662]: parsed url from cmdline: "" Jul 14 22:08:29.772484 systemd[1]: Finished dracut-initqueue.service. Jul 14 22:08:29.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.760087 ignition[662]: no config URL provided Jul 14 22:08:29.774259 systemd[1]: Reached target remote-fs-pre.target. Jul 14 22:08:29.760092 ignition[662]: reading system config file "/usr/lib/ignition/user.ign" Jul 14 22:08:29.775854 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 22:08:29.760098 ignition[662]: no config at "/usr/lib/ignition/user.ign" Jul 14 22:08:29.777477 systemd[1]: Reached target remote-fs.target. Jul 14 22:08:29.760116 ignition[662]: op(1): [started] loading QEMU firmware config module Jul 14 22:08:29.780013 systemd[1]: Starting dracut-pre-mount.service... Jul 14 22:08:29.760121 ignition[662]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 14 22:08:29.770533 ignition[662]: op(1): [finished] loading QEMU firmware config module Jul 14 22:08:29.787983 systemd[1]: Finished dracut-pre-mount.service. Jul 14 22:08:29.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.821007 ignition[662]: parsing config with SHA512: 717ed994ebfdbd328e339bf72898bd9c97283e6785ff66f70c4a87d383f2f872b514ecb1fa363fc0e3b04353bafd3681ffd80966130c015c4ae03ef7c91aa292 Jul 14 22:08:29.827372 unknown[662]: fetched base config from "system" Jul 14 22:08:29.827383 unknown[662]: fetched user config from "qemu" Jul 14 22:08:29.827773 ignition[662]: fetch-offline: fetch-offline passed Jul 14 22:08:29.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.828955 systemd[1]: Finished ignition-fetch-offline.service. Jul 14 22:08:29.827824 ignition[662]: Ignition finished successfully Jul 14 22:08:29.830403 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 14 22:08:29.831149 systemd[1]: Starting ignition-kargs.service... Jul 14 22:08:29.839509 ignition[760]: Ignition 2.14.0 Jul 14 22:08:29.839518 ignition[760]: Stage: kargs Jul 14 22:08:29.839602 ignition[760]: no configs at "/usr/lib/ignition/base.d" Jul 14 22:08:29.839611 ignition[760]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:08:29.840437 ignition[760]: kargs: kargs passed Jul 14 22:08:29.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.842542 systemd[1]: Finished ignition-kargs.service. Jul 14 22:08:29.840480 ignition[760]: Ignition finished successfully Jul 14 22:08:29.844846 systemd[1]: Starting ignition-disks.service... Jul 14 22:08:29.851147 ignition[766]: Ignition 2.14.0 Jul 14 22:08:29.851156 ignition[766]: Stage: disks Jul 14 22:08:29.851248 ignition[766]: no configs at "/usr/lib/ignition/base.d" Jul 14 22:08:29.851257 ignition[766]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:08:29.852545 ignition[766]: disks: disks passed Jul 14 22:08:29.852677 ignition[766]: Ignition finished successfully Jul 14 22:08:29.855105 systemd[1]: Finished ignition-disks.service. Jul 14 22:08:29.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.856210 systemd[1]: Reached target initrd-root-device.target. Jul 14 22:08:29.857476 systemd[1]: Reached target local-fs-pre.target. Jul 14 22:08:29.858737 systemd[1]: Reached target local-fs.target. Jul 14 22:08:29.860070 systemd[1]: Reached target sysinit.target. Jul 14 22:08:29.861314 systemd[1]: Reached target basic.target. Jul 14 22:08:29.863329 systemd[1]: Starting systemd-fsck-root.service... Jul 14 22:08:29.873468 systemd-fsck[774]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 14 22:08:29.879911 systemd[1]: Finished systemd-fsck-root.service. Jul 14 22:08:29.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.881591 systemd[1]: Mounting sysroot.mount... Jul 14 22:08:29.886926 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 14 22:08:29.887551 systemd[1]: Mounted sysroot.mount. Jul 14 22:08:29.888300 systemd[1]: Reached target initrd-root-fs.target. Jul 14 22:08:29.890936 systemd[1]: Mounting sysroot-usr.mount... Jul 14 22:08:29.891789 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 14 22:08:29.891825 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 14 22:08:29.891847 systemd[1]: Reached target ignition-diskful.target. Jul 14 22:08:29.893643 systemd[1]: Mounted sysroot-usr.mount. Jul 14 22:08:29.895605 systemd[1]: Starting initrd-setup-root.service... Jul 14 22:08:29.899800 initrd-setup-root[784]: cut: /sysroot/etc/passwd: No such file or directory Jul 14 22:08:29.903557 initrd-setup-root[792]: cut: /sysroot/etc/group: No such file or directory Jul 14 22:08:29.906824 initrd-setup-root[800]: cut: /sysroot/etc/shadow: No such file or directory Jul 14 22:08:29.910052 initrd-setup-root[808]: cut: /sysroot/etc/gshadow: No such file or directory Jul 14 22:08:29.934799 systemd[1]: Finished initrd-setup-root.service. Jul 14 22:08:29.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.936360 systemd[1]: Starting ignition-mount.service... Jul 14 22:08:29.937593 systemd[1]: Starting sysroot-boot.service... Jul 14 22:08:29.941300 bash[825]: umount: /sysroot/usr/share/oem: not mounted. Jul 14 22:08:29.949410 ignition[827]: INFO : Ignition 2.14.0 Jul 14 22:08:29.950320 ignition[827]: INFO : Stage: mount Jul 14 22:08:29.951085 ignition[827]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 14 22:08:29.951085 ignition[827]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:08:29.953111 ignition[827]: INFO : mount: mount passed Jul 14 22:08:29.953111 ignition[827]: INFO : Ignition finished successfully Jul 14 22:08:29.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:29.953871 systemd[1]: Finished ignition-mount.service. Jul 14 22:08:29.966126 systemd[1]: Finished sysroot-boot.service. Jul 14 22:08:29.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:08:30.558224 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 14 22:08:30.563914 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (835) Jul 14 22:08:30.566381 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 14 22:08:30.566405 kernel: BTRFS info (device vda6): using free space tree Jul 14 22:08:30.566423 kernel: BTRFS info (device vda6): has skinny extents Jul 14 22:08:30.569095 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 14 22:08:30.570585 systemd[1]: Starting ignition-files.service... Jul 14 22:08:30.583610 ignition[855]: INFO : Ignition 2.14.0 Jul 14 22:08:30.583610 ignition[855]: INFO : Stage: files Jul 14 22:08:30.585247 ignition[855]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 14 22:08:30.585247 ignition[855]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:08:30.585247 ignition[855]: DEBUG : files: compiled without relabeling support, skipping Jul 14 22:08:30.589054 ignition[855]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 14 22:08:30.589054 ignition[855]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 14 22:08:30.592051 ignition[855]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 14 22:08:30.592051 ignition[855]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 14 22:08:30.592051 ignition[855]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 14 22:08:30.592051 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Jul 14 22:08:30.592051 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Jul 14 22:08:30.591476 unknown[855]: wrote ssh authorized keys file for user: core Jul 14 22:08:31.445066 systemd-networkd[739]: eth0: Gained IPv6LL Jul 14 22:08:40.694736 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 14 22:08:40.857640 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Jul 14 22:08:40.857640 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 14 22:08:40.861431 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Jul 14 22:09:11.369027 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 14 22:09:11.746601 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 14 22:09:11.746601 ignition[855]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 14 22:09:11.750594 ignition[855]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 22:09:11.750594 ignition[855]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 22:09:11.750594 ignition[855]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 14 22:09:11.750594 ignition[855]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 14 22:09:11.750594 ignition[855]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 22:09:11.750594 ignition[855]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 22:09:11.750594 ignition[855]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 14 22:09:11.750594 ignition[855]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 14 22:09:11.750594 ignition[855]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 14 22:09:11.750594 ignition[855]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 14 22:09:11.750594 ignition[855]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 22:09:11.784745 ignition[855]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 22:09:11.786276 ignition[855]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 14 22:09:11.786276 ignition[855]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 14 22:09:11.786276 ignition[855]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 14 22:09:11.786276 ignition[855]: INFO : files: files passed Jul 14 22:09:11.786276 ignition[855]: INFO : Ignition finished successfully Jul 14 22:09:11.797249 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 14 22:09:11.797271 kernel: audit: type=1130 audit(1752530951.791:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.790729 systemd[1]: Finished ignition-files.service. Jul 14 22:09:11.793563 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 14 22:09:11.799800 initrd-setup-root-after-ignition[878]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 14 22:09:11.798291 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 14 22:09:11.808972 kernel: audit: type=1130 audit(1752530951.801:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.808994 kernel: audit: type=1131 audit(1752530951.801:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.801000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.809058 initrd-setup-root-after-ignition[881]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 14 22:09:11.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.798977 systemd[1]: Starting ignition-quench.service... Jul 14 22:09:11.815095 kernel: audit: type=1130 audit(1752530951.808:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.801527 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 14 22:09:11.801610 systemd[1]: Finished ignition-quench.service. Jul 14 22:09:11.802867 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 14 22:09:11.809954 systemd[1]: Reached target ignition-complete.target. Jul 14 22:09:11.815098 systemd[1]: Starting initrd-parse-etc.service... Jul 14 22:09:11.826989 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 14 22:09:11.827087 systemd[1]: Finished initrd-parse-etc.service. Jul 14 22:09:11.833852 kernel: audit: type=1130 audit(1752530951.827:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.833871 kernel: audit: type=1131 audit(1752530951.827:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.828779 systemd[1]: Reached target initrd-fs.target. Jul 14 22:09:11.834583 systemd[1]: Reached target initrd.target. Jul 14 22:09:11.835952 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 14 22:09:11.836695 systemd[1]: Starting dracut-pre-pivot.service... Jul 14 22:09:11.847171 systemd[1]: Finished dracut-pre-pivot.service. Jul 14 22:09:11.851982 kernel: audit: type=1130 audit(1752530951.847:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.848797 systemd[1]: Starting initrd-cleanup.service... Jul 14 22:09:11.856995 systemd[1]: Stopped target nss-lookup.target. Jul 14 22:09:11.857875 systemd[1]: Stopped target remote-cryptsetup.target. Jul 14 22:09:11.859333 systemd[1]: Stopped target timers.target. Jul 14 22:09:11.860718 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 14 22:09:11.860826 systemd[1]: Stopped dracut-pre-pivot.service. Jul 14 22:09:11.862153 systemd[1]: Stopped target initrd.target. Jul 14 22:09:11.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.863568 systemd[1]: Stopped target basic.target. Jul 14 22:09:11.869148 kernel: audit: type=1131 audit(1752530951.861:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.864857 systemd[1]: Stopped target ignition-complete.target. Jul 14 22:09:11.868630 systemd[1]: Stopped target ignition-diskful.target. Jul 14 22:09:11.869957 systemd[1]: Stopped target initrd-root-device.target. Jul 14 22:09:11.871435 systemd[1]: Stopped target remote-fs.target. Jul 14 22:09:11.872772 systemd[1]: Stopped target remote-fs-pre.target. Jul 14 22:09:11.874206 systemd[1]: Stopped target sysinit.target. Jul 14 22:09:11.875468 systemd[1]: Stopped target local-fs.target. Jul 14 22:09:11.876743 systemd[1]: Stopped target local-fs-pre.target. Jul 14 22:09:11.878066 systemd[1]: Stopped target swap.target. Jul 14 22:09:11.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.879289 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 14 22:09:11.885083 kernel: audit: type=1131 audit(1752530951.879:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.879412 systemd[1]: Stopped dracut-pre-mount.service. Jul 14 22:09:11.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.880782 systemd[1]: Stopped target cryptsetup.target. Jul 14 22:09:11.890228 kernel: audit: type=1131 audit(1752530951.884:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.884338 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 14 22:09:11.884439 systemd[1]: Stopped dracut-initqueue.service. Jul 14 22:09:11.885914 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 14 22:09:11.886011 systemd[1]: Stopped ignition-fetch-offline.service. Jul 14 22:09:11.889704 systemd[1]: Stopped target paths.target. Jul 14 22:09:11.891042 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 14 22:09:11.894939 systemd[1]: Stopped systemd-ask-password-console.path. Jul 14 22:09:11.895972 systemd[1]: Stopped target slices.target. Jul 14 22:09:11.897513 systemd[1]: Stopped target sockets.target. Jul 14 22:09:11.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.898923 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 14 22:09:11.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.899038 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 14 22:09:11.904177 iscsid[744]: iscsid shutting down. Jul 14 22:09:11.900431 systemd[1]: ignition-files.service: Deactivated successfully. Jul 14 22:09:11.900529 systemd[1]: Stopped ignition-files.service. Jul 14 22:09:11.902592 systemd[1]: Stopping ignition-mount.service... Jul 14 22:09:11.904028 systemd[1]: Stopping iscsid.service... Jul 14 22:09:11.909361 ignition[895]: INFO : Ignition 2.14.0 Jul 14 22:09:11.909361 ignition[895]: INFO : Stage: umount Jul 14 22:09:11.909361 ignition[895]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 14 22:09:11.909361 ignition[895]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:09:11.905000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.904627 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 14 22:09:11.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.916637 ignition[895]: INFO : umount: umount passed Jul 14 22:09:11.916637 ignition[895]: INFO : Ignition finished successfully Jul 14 22:09:11.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.918000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.904747 systemd[1]: Stopped kmod-static-nodes.service. Jul 14 22:09:11.906713 systemd[1]: Stopping sysroot-boot.service... Jul 14 22:09:11.908724 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 14 22:09:11.922000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.908868 systemd[1]: Stopped systemd-udev-trigger.service. Jul 14 22:09:11.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.910410 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 14 22:09:11.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.910506 systemd[1]: Stopped dracut-pre-trigger.service. Jul 14 22:09:11.913133 systemd[1]: iscsid.service: Deactivated successfully. Jul 14 22:09:11.927000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.913232 systemd[1]: Stopped iscsid.service. Jul 14 22:09:11.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.914364 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 14 22:09:11.914439 systemd[1]: Stopped ignition-mount.service. Jul 14 22:09:11.916979 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 14 22:09:11.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.917441 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 14 22:09:11.917525 systemd[1]: Finished initrd-cleanup.service. Jul 14 22:09:11.919300 systemd[1]: iscsid.socket: Deactivated successfully. Jul 14 22:09:11.919338 systemd[1]: Closed iscsid.socket. Jul 14 22:09:11.920871 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 14 22:09:11.920929 systemd[1]: Stopped ignition-disks.service. Jul 14 22:09:11.922336 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 14 22:09:11.922382 systemd[1]: Stopped ignition-kargs.service. Jul 14 22:09:11.923830 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 14 22:09:11.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.923871 systemd[1]: Stopped ignition-setup.service. Jul 14 22:09:11.925258 systemd[1]: Stopping iscsiuio.service... Jul 14 22:09:11.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.927728 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 14 22:09:11.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.927816 systemd[1]: Stopped iscsiuio.service. Jul 14 22:09:11.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.929082 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 14 22:09:11.929161 systemd[1]: Stopped sysroot-boot.service. Jul 14 22:09:11.930413 systemd[1]: Stopped target network.target. Jul 14 22:09:11.953000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.931528 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 14 22:09:11.931559 systemd[1]: Closed iscsiuio.socket. Jul 14 22:09:11.932939 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 14 22:09:11.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.932982 systemd[1]: Stopped initrd-setup-root.service. Jul 14 22:09:11.959000 audit: BPF prog-id=6 op=UNLOAD Jul 14 22:09:11.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.934396 systemd[1]: Stopping systemd-networkd.service... Jul 14 22:09:11.935808 systemd[1]: Stopping systemd-resolved.service... Jul 14 22:09:11.940934 systemd-networkd[739]: eth0: DHCPv6 lease lost Jul 14 22:09:11.962000 audit: BPF prog-id=9 op=UNLOAD Jul 14 22:09:11.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.942087 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 14 22:09:11.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.942175 systemd[1]: Stopped systemd-networkd.service. Jul 14 22:09:11.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.943730 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 14 22:09:11.943760 systemd[1]: Closed systemd-networkd.socket. Jul 14 22:09:11.945690 systemd[1]: Stopping network-cleanup.service... Jul 14 22:09:11.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.946463 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 14 22:09:11.946525 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 14 22:09:11.948070 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 14 22:09:11.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:11.948119 systemd[1]: Stopped systemd-sysctl.service. Jul 14 22:09:11.950109 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 14 22:09:11.950150 systemd[1]: Stopped systemd-modules-load.service. Jul 14 22:09:11.951082 systemd[1]: Stopping systemd-udevd.service... Jul 14 22:09:11.953038 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 14 22:09:11.953447 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 14 22:09:11.953532 systemd[1]: Stopped systemd-resolved.service. Jul 14 22:09:11.956603 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 14 22:09:11.956698 systemd[1]: Stopped network-cleanup.service. Jul 14 22:09:11.958177 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 14 22:09:11.958299 systemd[1]: Stopped systemd-udevd.service. Jul 14 22:09:11.959783 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 14 22:09:11.959815 systemd[1]: Closed systemd-udevd-control.socket. Jul 14 22:09:11.960943 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 14 22:09:11.960973 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 14 22:09:11.962304 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 14 22:09:11.962346 systemd[1]: Stopped dracut-pre-udev.service. Jul 14 22:09:11.963768 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 14 22:09:11.963812 systemd[1]: Stopped dracut-cmdline.service. Jul 14 22:09:11.965163 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 14 22:09:11.965203 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 14 22:09:11.967351 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 14 22:09:11.968890 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 14 22:09:11.968991 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 14 22:09:11.972641 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 14 22:09:11.972727 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 14 22:09:11.973817 systemd[1]: Reached target initrd-switch-root.target. Jul 14 22:09:11.975993 systemd[1]: Starting initrd-switch-root.service... Jul 14 22:09:11.982469 systemd[1]: Switching root. Jul 14 22:09:12.004257 systemd-journald[290]: Journal stopped Jul 14 22:09:13.986954 systemd-journald[290]: Received SIGTERM from PID 1 (systemd). Jul 14 22:09:13.988458 kernel: SELinux: Class mctp_socket not defined in policy. Jul 14 22:09:13.988479 kernel: SELinux: Class anon_inode not defined in policy. Jul 14 22:09:13.988491 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 14 22:09:13.988505 kernel: SELinux: policy capability network_peer_controls=1 Jul 14 22:09:13.988517 kernel: SELinux: policy capability open_perms=1 Jul 14 22:09:13.988526 kernel: SELinux: policy capability extended_socket_class=1 Jul 14 22:09:13.988539 kernel: SELinux: policy capability always_check_network=0 Jul 14 22:09:13.988549 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 14 22:09:13.988559 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 14 22:09:13.988569 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 14 22:09:13.988578 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 14 22:09:13.988592 systemd[1]: Successfully loaded SELinux policy in 34.473ms. Jul 14 22:09:13.988608 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.038ms. Jul 14 22:09:13.988621 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 22:09:13.988634 systemd[1]: Detected virtualization kvm. Jul 14 22:09:13.988645 systemd[1]: Detected architecture arm64. Jul 14 22:09:13.988655 systemd[1]: Detected first boot. Jul 14 22:09:13.988665 systemd[1]: Initializing machine ID from VM UUID. Jul 14 22:09:13.988676 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 14 22:09:13.988690 systemd[1]: Populated /etc with preset unit settings. Jul 14 22:09:13.988701 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 22:09:13.988713 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 22:09:13.988735 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 22:09:13.988749 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 14 22:09:13.988760 systemd[1]: Stopped initrd-switch-root.service. Jul 14 22:09:13.988772 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 14 22:09:13.988783 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 14 22:09:13.988794 systemd[1]: Created slice system-addon\x2drun.slice. Jul 14 22:09:13.988804 systemd[1]: Created slice system-getty.slice. Jul 14 22:09:13.988815 systemd[1]: Created slice system-modprobe.slice. Jul 14 22:09:13.988825 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 14 22:09:13.988836 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 14 22:09:13.988847 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 14 22:09:13.988860 systemd[1]: Created slice user.slice. Jul 14 22:09:13.988871 systemd[1]: Started systemd-ask-password-console.path. Jul 14 22:09:13.988883 systemd[1]: Started systemd-ask-password-wall.path. Jul 14 22:09:13.988894 systemd[1]: Set up automount boot.automount. Jul 14 22:09:13.988921 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 14 22:09:13.988933 systemd[1]: Stopped target initrd-switch-root.target. Jul 14 22:09:13.988945 systemd[1]: Stopped target initrd-fs.target. Jul 14 22:09:13.988955 systemd[1]: Stopped target initrd-root-fs.target. Jul 14 22:09:13.988967 systemd[1]: Reached target integritysetup.target. Jul 14 22:09:13.988978 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 22:09:13.988990 systemd[1]: Reached target remote-fs.target. Jul 14 22:09:13.989001 systemd[1]: Reached target slices.target. Jul 14 22:09:13.989012 systemd[1]: Reached target swap.target. Jul 14 22:09:13.989022 systemd[1]: Reached target torcx.target. Jul 14 22:09:13.989033 systemd[1]: Reached target veritysetup.target. Jul 14 22:09:13.989044 systemd[1]: Listening on systemd-coredump.socket. Jul 14 22:09:13.989054 systemd[1]: Listening on systemd-initctl.socket. Jul 14 22:09:13.989065 systemd[1]: Listening on systemd-networkd.socket. Jul 14 22:09:13.989076 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 22:09:13.989088 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 22:09:13.989099 systemd[1]: Listening on systemd-userdbd.socket. Jul 14 22:09:13.989111 systemd[1]: Mounting dev-hugepages.mount... Jul 14 22:09:13.989136 systemd[1]: Mounting dev-mqueue.mount... Jul 14 22:09:13.989150 systemd[1]: Mounting media.mount... Jul 14 22:09:13.989161 systemd[1]: Mounting sys-kernel-debug.mount... Jul 14 22:09:13.989172 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 14 22:09:13.989182 systemd[1]: Mounting tmp.mount... Jul 14 22:09:13.989194 systemd[1]: Starting flatcar-tmpfiles.service... Jul 14 22:09:13.989205 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:09:13.989226 systemd[1]: Starting kmod-static-nodes.service... Jul 14 22:09:13.989239 systemd[1]: Starting modprobe@configfs.service... Jul 14 22:09:13.989251 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:09:13.989262 systemd[1]: Starting modprobe@drm.service... Jul 14 22:09:13.989272 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:09:13.989283 systemd[1]: Starting modprobe@fuse.service... Jul 14 22:09:13.989294 systemd[1]: Starting modprobe@loop.service... Jul 14 22:09:13.989305 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 14 22:09:13.989317 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 14 22:09:13.989329 systemd[1]: Stopped systemd-fsck-root.service. Jul 14 22:09:13.989339 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 14 22:09:13.989351 systemd[1]: Stopped systemd-fsck-usr.service. Jul 14 22:09:13.989362 systemd[1]: Stopped systemd-journald.service. Jul 14 22:09:13.989372 systemd[1]: Starting systemd-journald.service... Jul 14 22:09:13.989383 kernel: fuse: init (API version 7.34) Jul 14 22:09:13.989392 systemd[1]: Starting systemd-modules-load.service... Jul 14 22:09:13.989403 systemd[1]: Starting systemd-network-generator.service... Jul 14 22:09:13.989414 systemd[1]: Starting systemd-remount-fs.service... Jul 14 22:09:13.989425 kernel: loop: module loaded Jul 14 22:09:13.989436 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 22:09:13.989446 systemd[1]: verity-setup.service: Deactivated successfully. Jul 14 22:09:13.989456 systemd[1]: Stopped verity-setup.service. Jul 14 22:09:13.989467 systemd[1]: Mounted dev-hugepages.mount. Jul 14 22:09:13.989477 systemd[1]: Mounted dev-mqueue.mount. Jul 14 22:09:13.989488 systemd[1]: Mounted media.mount. Jul 14 22:09:13.989498 systemd[1]: Mounted sys-kernel-debug.mount. Jul 14 22:09:13.989508 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 14 22:09:13.989520 systemd[1]: Mounted tmp.mount. Jul 14 22:09:13.989531 systemd[1]: Finished kmod-static-nodes.service. Jul 14 22:09:13.989541 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 14 22:09:13.989553 systemd[1]: Finished modprobe@configfs.service. Jul 14 22:09:13.989566 systemd-journald[992]: Journal started Jul 14 22:09:13.989613 systemd-journald[992]: Runtime Journal (/run/log/journal/e6b2664555bc4a90a54bb9913d75f557) is 6.0M, max 48.7M, 42.6M free. Jul 14 22:09:12.067000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 14 22:09:12.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 22:09:12.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 22:09:12.104000 audit: BPF prog-id=10 op=LOAD Jul 14 22:09:12.104000 audit: BPF prog-id=10 op=UNLOAD Jul 14 22:09:12.104000 audit: BPF prog-id=11 op=LOAD Jul 14 22:09:12.104000 audit: BPF prog-id=11 op=UNLOAD Jul 14 22:09:12.139000 audit[929]: AVC avc: denied { associate } for pid=929 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 14 22:09:12.139000 audit[929]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001cd8b4 a1=4000150de0 a2=4000157040 a3=32 items=0 ppid=912 pid=929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:12.139000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 22:09:12.141000 audit[929]: AVC avc: denied { associate } for pid=929 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 14 22:09:12.141000 audit[929]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001cd989 a2=1ed a3=0 items=2 ppid=912 pid=929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:12.141000 audit: CWD cwd="/" Jul 14 22:09:12.141000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:09:12.141000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:09:12.141000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 22:09:13.851000 audit: BPF prog-id=12 op=LOAD Jul 14 22:09:13.851000 audit: BPF prog-id=3 op=UNLOAD Jul 14 22:09:13.851000 audit: BPF prog-id=13 op=LOAD Jul 14 22:09:13.851000 audit: BPF prog-id=14 op=LOAD Jul 14 22:09:13.851000 audit: BPF prog-id=4 op=UNLOAD Jul 14 22:09:13.851000 audit: BPF prog-id=5 op=UNLOAD Jul 14 22:09:13.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.862000 audit: BPF prog-id=12 op=UNLOAD Jul 14 22:09:13.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.955000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.956000 audit: BPF prog-id=15 op=LOAD Jul 14 22:09:13.956000 audit: BPF prog-id=16 op=LOAD Jul 14 22:09:13.956000 audit: BPF prog-id=17 op=LOAD Jul 14 22:09:13.956000 audit: BPF prog-id=13 op=UNLOAD Jul 14 22:09:13.956000 audit: BPF prog-id=14 op=UNLOAD Jul 14 22:09:13.974000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.983000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 14 22:09:13.983000 audit[992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=ffffc50d4b80 a2=4000 a3=1 items=0 ppid=1 pid=992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:13.983000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 14 22:09:13.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:12.138055 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 22:09:13.850164 systemd[1]: Queued start job for default target multi-user.target. Jul 14 22:09:13.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:12.138322 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 22:09:13.850177 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 14 22:09:12.138345 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 22:09:13.852800 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 14 22:09:12.138375 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 14 22:09:12.138385 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 14 22:09:12.138414 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 14 22:09:12.138427 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 14 22:09:12.138622 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 14 22:09:12.138655 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 22:09:12.138667 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 22:09:12.139656 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 14 22:09:12.139690 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 14 22:09:12.139709 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.101: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.101 Jul 14 22:09:12.139722 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 14 22:09:12.139740 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.101: no such file or directory" path=/var/lib/torcx/store/3510.3.101 Jul 14 22:09:12.139753 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 14 22:09:13.577838 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:13Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 22:09:13.578117 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:13Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 22:09:13.578232 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:13Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 22:09:13.992299 systemd[1]: Started systemd-journald.service. Jul 14 22:09:13.578399 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:13Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 22:09:13.578452 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:13Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 14 22:09:13.578508 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-14T22:09:13Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 14 22:09:13.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.992964 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:09:13.993118 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:09:13.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.993000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.994270 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 22:09:13.994423 systemd[1]: Finished modprobe@drm.service. Jul 14 22:09:13.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.995514 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:09:13.995668 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:09:13.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.996868 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 14 22:09:13.997048 systemd[1]: Finished modprobe@fuse.service. Jul 14 22:09:13.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.998103 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:09:13.998269 systemd[1]: Finished modprobe@loop.service. Jul 14 22:09:13.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:13.999454 systemd[1]: Finished systemd-modules-load.service. Jul 14 22:09:14.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.000738 systemd[1]: Finished flatcar-tmpfiles.service. Jul 14 22:09:14.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.001949 systemd[1]: Finished systemd-network-generator.service. Jul 14 22:09:14.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.003274 systemd[1]: Finished systemd-remount-fs.service. Jul 14 22:09:14.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.004684 systemd[1]: Reached target network-pre.target. Jul 14 22:09:14.006684 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 14 22:09:14.008831 systemd[1]: Mounting sys-kernel-config.mount... Jul 14 22:09:14.009600 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 14 22:09:14.013887 systemd[1]: Starting systemd-hwdb-update.service... Jul 14 22:09:14.015928 systemd[1]: Starting systemd-journal-flush.service... Jul 14 22:09:14.016796 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 22:09:14.017832 systemd[1]: Starting systemd-random-seed.service... Jul 14 22:09:14.018845 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 22:09:14.020798 systemd-journald[992]: Time spent on flushing to /var/log/journal/e6b2664555bc4a90a54bb9913d75f557 is 17.978ms for 986 entries. Jul 14 22:09:14.020798 systemd-journald[992]: System Journal (/var/log/journal/e6b2664555bc4a90a54bb9913d75f557) is 8.0M, max 195.6M, 187.6M free. Jul 14 22:09:14.049400 systemd-journald[992]: Received client request to flush runtime journal. Jul 14 22:09:14.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.021416 systemd[1]: Starting systemd-sysctl.service... Jul 14 22:09:14.023850 systemd[1]: Starting systemd-sysusers.service... Jul 14 22:09:14.026880 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 22:09:14.028007 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 14 22:09:14.051182 udevadm[1029]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 14 22:09:14.029026 systemd[1]: Mounted sys-kernel-config.mount. Jul 14 22:09:14.030210 systemd[1]: Finished systemd-random-seed.service. Jul 14 22:09:14.031276 systemd[1]: Reached target first-boot-complete.target. Jul 14 22:09:14.033273 systemd[1]: Starting systemd-udev-settle.service... Jul 14 22:09:14.045637 systemd[1]: Finished systemd-sysctl.service. Jul 14 22:09:14.050644 systemd[1]: Finished systemd-journal-flush.service. Jul 14 22:09:14.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.052779 systemd[1]: Finished systemd-sysusers.service. Jul 14 22:09:14.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.394654 systemd[1]: Finished systemd-hwdb-update.service. Jul 14 22:09:14.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.395000 audit: BPF prog-id=18 op=LOAD Jul 14 22:09:14.395000 audit: BPF prog-id=19 op=LOAD Jul 14 22:09:14.395000 audit: BPF prog-id=7 op=UNLOAD Jul 14 22:09:14.395000 audit: BPF prog-id=8 op=UNLOAD Jul 14 22:09:14.397154 systemd[1]: Starting systemd-udevd.service... Jul 14 22:09:14.425381 systemd-udevd[1033]: Using default interface naming scheme 'v252'. Jul 14 22:09:14.444850 systemd[1]: Started systemd-udevd.service. Jul 14 22:09:14.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.448000 audit: BPF prog-id=20 op=LOAD Jul 14 22:09:14.450862 systemd[1]: Starting systemd-networkd.service... Jul 14 22:09:14.466000 audit: BPF prog-id=21 op=LOAD Jul 14 22:09:14.468000 audit: BPF prog-id=22 op=LOAD Jul 14 22:09:14.470000 audit: BPF prog-id=23 op=LOAD Jul 14 22:09:14.472316 systemd[1]: Starting systemd-userdbd.service... Jul 14 22:09:14.479088 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 14 22:09:14.501053 systemd[1]: Started systemd-userdbd.service. Jul 14 22:09:14.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.553671 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 22:09:14.558739 systemd-networkd[1046]: lo: Link UP Jul 14 22:09:14.558746 systemd-networkd[1046]: lo: Gained carrier Jul 14 22:09:14.559124 systemd-networkd[1046]: Enumeration completed Jul 14 22:09:14.559242 systemd-networkd[1046]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 14 22:09:14.559270 systemd[1]: Started systemd-networkd.service. Jul 14 22:09:14.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.560475 systemd-networkd[1046]: eth0: Link UP Jul 14 22:09:14.560482 systemd-networkd[1046]: eth0: Gained carrier Jul 14 22:09:14.565272 systemd[1]: Finished systemd-udev-settle.service. Jul 14 22:09:14.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.567394 systemd[1]: Starting lvm2-activation-early.service... Jul 14 22:09:14.582042 systemd-networkd[1046]: eth0: DHCPv4 address 10.0.0.118/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 14 22:09:14.584636 lvm[1066]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 22:09:14.608780 systemd[1]: Finished lvm2-activation-early.service. Jul 14 22:09:14.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.609871 systemd[1]: Reached target cryptsetup.target. Jul 14 22:09:14.611869 systemd[1]: Starting lvm2-activation.service... Jul 14 22:09:14.615498 lvm[1067]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 22:09:14.641818 systemd[1]: Finished lvm2-activation.service. Jul 14 22:09:14.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.642860 systemd[1]: Reached target local-fs-pre.target. Jul 14 22:09:14.643767 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 14 22:09:14.643797 systemd[1]: Reached target local-fs.target. Jul 14 22:09:14.644594 systemd[1]: Reached target machines.target. Jul 14 22:09:14.646635 systemd[1]: Starting ldconfig.service... Jul 14 22:09:14.647753 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:09:14.647809 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:09:14.649137 systemd[1]: Starting systemd-boot-update.service... Jul 14 22:09:14.651100 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 14 22:09:14.653246 systemd[1]: Starting systemd-machine-id-commit.service... Jul 14 22:09:14.655331 systemd[1]: Starting systemd-sysext.service... Jul 14 22:09:14.659662 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1069 (bootctl) Jul 14 22:09:14.662110 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 14 22:09:14.668201 systemd[1]: Unmounting usr-share-oem.mount... Jul 14 22:09:14.670908 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 14 22:09:14.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.678984 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 14 22:09:14.679169 systemd[1]: Unmounted usr-share-oem.mount. Jul 14 22:09:14.690068 kernel: loop0: detected capacity change from 0 to 207008 Jul 14 22:09:14.711323 systemd-fsck[1078]: fsck.fat 4.2 (2021-01-31) Jul 14 22:09:14.711323 systemd-fsck[1078]: /dev/vda1: 236 files, 117310/258078 clusters Jul 14 22:09:14.712857 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 14 22:09:14.715334 systemd[1]: Mounting boot.mount... Jul 14 22:09:14.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.802305 systemd[1]: Mounted boot.mount. Jul 14 22:09:14.804563 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 14 22:09:14.805145 systemd[1]: Finished systemd-machine-id-commit.service. Jul 14 22:09:14.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.811930 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 14 22:09:14.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.812618 systemd[1]: Finished systemd-boot-update.service. Jul 14 22:09:14.829924 kernel: loop1: detected capacity change from 0 to 207008 Jul 14 22:09:14.838172 (sd-sysext)[1084]: Using extensions 'kubernetes'. Jul 14 22:09:14.838664 (sd-sysext)[1084]: Merged extensions into '/usr'. Jul 14 22:09:14.857092 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:09:14.858534 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:09:14.860619 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:09:14.862850 systemd[1]: Starting modprobe@loop.service... Jul 14 22:09:14.863840 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:09:14.864014 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:09:14.864822 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:09:14.864974 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:09:14.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.866640 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:09:14.866754 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:09:14.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.868354 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:09:14.868466 systemd[1]: Finished modprobe@loop.service. Jul 14 22:09:14.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.870015 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 22:09:14.870125 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 22:09:14.907390 ldconfig[1068]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 14 22:09:14.911728 systemd[1]: Finished ldconfig.service. Jul 14 22:09:14.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.978269 systemd[1]: Mounting usr-share-oem.mount... Jul 14 22:09:14.983498 systemd[1]: Mounted usr-share-oem.mount. Jul 14 22:09:14.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:14.985428 systemd[1]: Finished systemd-sysext.service. Jul 14 22:09:14.988335 systemd[1]: Starting ensure-sysext.service... Jul 14 22:09:14.990084 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 14 22:09:14.994535 systemd[1]: Reloading. Jul 14 22:09:15.006266 systemd-tmpfiles[1091]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 14 22:09:15.008118 systemd-tmpfiles[1091]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 14 22:09:15.010927 systemd-tmpfiles[1091]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 14 22:09:15.031014 /usr/lib/systemd/system-generators/torcx-generator[1111]: time="2025-07-14T22:09:15Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 22:09:15.031041 /usr/lib/systemd/system-generators/torcx-generator[1111]: time="2025-07-14T22:09:15Z" level=info msg="torcx already run" Jul 14 22:09:15.097043 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 22:09:15.097064 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 22:09:15.113220 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 22:09:15.155000 audit: BPF prog-id=24 op=LOAD Jul 14 22:09:15.155000 audit: BPF prog-id=15 op=UNLOAD Jul 14 22:09:15.155000 audit: BPF prog-id=25 op=LOAD Jul 14 22:09:15.155000 audit: BPF prog-id=26 op=LOAD Jul 14 22:09:15.155000 audit: BPF prog-id=16 op=UNLOAD Jul 14 22:09:15.155000 audit: BPF prog-id=17 op=UNLOAD Jul 14 22:09:15.155000 audit: BPF prog-id=27 op=LOAD Jul 14 22:09:15.156000 audit: BPF prog-id=21 op=UNLOAD Jul 14 22:09:15.156000 audit: BPF prog-id=28 op=LOAD Jul 14 22:09:15.156000 audit: BPF prog-id=29 op=LOAD Jul 14 22:09:15.156000 audit: BPF prog-id=22 op=UNLOAD Jul 14 22:09:15.156000 audit: BPF prog-id=23 op=UNLOAD Jul 14 22:09:15.157000 audit: BPF prog-id=30 op=LOAD Jul 14 22:09:15.157000 audit: BPF prog-id=20 op=UNLOAD Jul 14 22:09:15.158000 audit: BPF prog-id=31 op=LOAD Jul 14 22:09:15.158000 audit: BPF prog-id=32 op=LOAD Jul 14 22:09:15.158000 audit: BPF prog-id=18 op=UNLOAD Jul 14 22:09:15.158000 audit: BPF prog-id=19 op=UNLOAD Jul 14 22:09:15.161814 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 14 22:09:15.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.166736 systemd[1]: Starting audit-rules.service... Jul 14 22:09:15.168790 systemd[1]: Starting clean-ca-certificates.service... Jul 14 22:09:15.174000 audit: BPF prog-id=33 op=LOAD Jul 14 22:09:15.171382 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 14 22:09:15.175921 systemd[1]: Starting systemd-resolved.service... Jul 14 22:09:15.177000 audit: BPF prog-id=34 op=LOAD Jul 14 22:09:15.178957 systemd[1]: Starting systemd-timesyncd.service... Jul 14 22:09:15.181016 systemd[1]: Starting systemd-update-utmp.service... Jul 14 22:09:15.184590 systemd[1]: Finished clean-ca-certificates.service. Jul 14 22:09:15.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.185962 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 22:09:15.188000 audit[1160]: SYSTEM_BOOT pid=1160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.191741 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 14 22:09:15.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.194928 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:09:15.196302 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:09:15.198533 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:09:15.200562 systemd[1]: Starting modprobe@loop.service... Jul 14 22:09:15.201456 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:09:15.201606 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:09:15.203108 systemd[1]: Starting systemd-update-done.service... Jul 14 22:09:15.204009 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 22:09:15.205343 systemd[1]: Finished systemd-update-utmp.service. Jul 14 22:09:15.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.207000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.206703 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:09:15.206820 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:09:15.208073 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:09:15.208184 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:09:15.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.210000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.209474 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:09:15.209584 systemd[1]: Finished modprobe@loop.service. Jul 14 22:09:15.210810 systemd[1]: Finished systemd-update-done.service. Jul 14 22:09:15.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.214279 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:09:15.215628 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:09:15.217597 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:09:15.219699 systemd[1]: Starting modprobe@loop.service... Jul 14 22:09:15.220518 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:09:15.220649 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:09:15.220743 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 22:09:15.221528 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:09:15.221658 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:09:15.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.222000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.222885 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:09:15.223022 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:09:15.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.224241 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:09:15.224362 systemd[1]: Finished modprobe@loop.service. Jul 14 22:09:15.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:15.225597 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 22:09:15.225695 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 22:09:15.227985 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:09:15.229371 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:09:15.231499 systemd[1]: Starting modprobe@drm.service... Jul 14 22:09:15.233400 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:09:15.235292 systemd[1]: Starting modprobe@loop.service... Jul 14 22:09:15.236077 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:09:15.236200 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:09:15.237828 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 14 22:09:15.238822 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 22:09:15.238000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 14 22:09:15.238000 audit[1176]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc8d25d80 a2=420 a3=0 items=0 ppid=1149 pid=1176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:15.238000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 14 22:09:15.239550 augenrules[1176]: No rules Jul 14 22:09:15.240055 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:09:15.240197 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:09:15.241502 systemd[1]: Finished audit-rules.service. Jul 14 22:09:15.242795 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 22:09:15.242988 systemd[1]: Finished modprobe@drm.service. Jul 14 22:09:15.244182 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:09:15.244308 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:09:15.245517 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:09:15.245643 systemd[1]: Finished modprobe@loop.service. Jul 14 22:09:15.247190 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 22:09:15.247276 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 22:09:15.248251 systemd[1]: Finished ensure-sysext.service. Jul 14 22:09:15.253220 systemd-resolved[1153]: Positive Trust Anchors: Jul 14 22:09:15.253231 systemd-resolved[1153]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 22:09:15.253257 systemd-resolved[1153]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 22:09:15.254956 systemd[1]: Started systemd-timesyncd.service. Jul 14 22:09:14.779619 systemd-timesyncd[1159]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 14 22:09:14.802227 systemd-journald[992]: Time jumped backwards, rotating. Jul 14 22:09:14.779776 systemd[1]: Reached target time-set.target. Jul 14 22:09:14.779911 systemd-timesyncd[1159]: Initial clock synchronization to Mon 2025-07-14 22:09:14.779522 UTC. Jul 14 22:09:14.789037 systemd-resolved[1153]: Defaulting to hostname 'linux'. Jul 14 22:09:14.790699 systemd[1]: Started systemd-resolved.service. Jul 14 22:09:14.791586 systemd[1]: Reached target network.target. Jul 14 22:09:14.792473 systemd[1]: Reached target nss-lookup.target. Jul 14 22:09:14.793317 systemd[1]: Reached target sysinit.target. Jul 14 22:09:14.794174 systemd[1]: Started motdgen.path. Jul 14 22:09:14.794910 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 14 22:09:14.796135 systemd[1]: Started logrotate.timer. Jul 14 22:09:14.796978 systemd[1]: Started mdadm.timer. Jul 14 22:09:14.797639 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 14 22:09:14.798472 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 14 22:09:14.798495 systemd[1]: Reached target paths.target. Jul 14 22:09:14.799202 systemd[1]: Reached target timers.target. Jul 14 22:09:14.800487 systemd[1]: Listening on dbus.socket. Jul 14 22:09:14.802592 systemd[1]: Starting docker.socket... Jul 14 22:09:14.805739 systemd[1]: Listening on sshd.socket. Jul 14 22:09:14.806606 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:09:14.807071 systemd[1]: Listening on docker.socket. Jul 14 22:09:14.807912 systemd[1]: Reached target sockets.target. Jul 14 22:09:14.808669 systemd[1]: Reached target basic.target. Jul 14 22:09:14.809450 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 22:09:14.809484 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 22:09:14.810439 systemd[1]: Starting containerd.service... Jul 14 22:09:14.812138 systemd[1]: Starting dbus.service... Jul 14 22:09:14.813946 systemd[1]: Starting enable-oem-cloudinit.service... Jul 14 22:09:14.816027 systemd[1]: Starting extend-filesystems.service... Jul 14 22:09:14.817007 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 14 22:09:14.818274 systemd[1]: Starting motdgen.service... Jul 14 22:09:14.820254 systemd[1]: Starting prepare-helm.service... Jul 14 22:09:14.822658 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 14 22:09:14.824474 jq[1192]: false Jul 14 22:09:14.824677 systemd[1]: Starting sshd-keygen.service... Jul 14 22:09:14.827734 systemd[1]: Starting systemd-logind.service... Jul 14 22:09:14.828665 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:09:14.828753 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 14 22:09:14.829194 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 14 22:09:14.829997 systemd[1]: Starting update-engine.service... Jul 14 22:09:14.832369 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 14 22:09:14.835346 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 14 22:09:14.836319 jq[1210]: true Jul 14 22:09:14.835550 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 14 22:09:14.836579 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 14 22:09:14.836768 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 14 22:09:14.843868 systemd[1]: motdgen.service: Deactivated successfully. Jul 14 22:09:14.844037 systemd[1]: Finished motdgen.service. Jul 14 22:09:14.845221 jq[1214]: true Jul 14 22:09:14.846538 extend-filesystems[1193]: Found loop1 Jul 14 22:09:14.846538 extend-filesystems[1193]: Found vda Jul 14 22:09:14.849683 extend-filesystems[1193]: Found vda1 Jul 14 22:09:14.849683 extend-filesystems[1193]: Found vda2 Jul 14 22:09:14.849683 extend-filesystems[1193]: Found vda3 Jul 14 22:09:14.849683 extend-filesystems[1193]: Found usr Jul 14 22:09:14.849683 extend-filesystems[1193]: Found vda4 Jul 14 22:09:14.849683 extend-filesystems[1193]: Found vda6 Jul 14 22:09:14.849683 extend-filesystems[1193]: Found vda7 Jul 14 22:09:14.849683 extend-filesystems[1193]: Found vda9 Jul 14 22:09:14.849683 extend-filesystems[1193]: Checking size of /dev/vda9 Jul 14 22:09:14.894856 extend-filesystems[1193]: Resized partition /dev/vda9 Jul 14 22:09:14.881892 systemd[1]: Started dbus.service. Jul 14 22:09:14.896803 tar[1213]: linux-arm64/LICENSE Jul 14 22:09:14.896803 tar[1213]: linux-arm64/helm Jul 14 22:09:14.880738 dbus-daemon[1191]: [system] SELinux support is enabled Jul 14 22:09:14.897138 extend-filesystems[1229]: resize2fs 1.46.5 (30-Dec-2021) Jul 14 22:09:14.884613 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 14 22:09:14.884633 systemd[1]: Reached target system-config.target. Jul 14 22:09:14.885602 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 14 22:09:14.885620 systemd[1]: Reached target user-config.target. Jul 14 22:09:14.909405 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 14 22:09:14.944058 systemd-logind[1202]: Watching system buttons on /dev/input/event0 (Power Button) Jul 14 22:09:14.944563 systemd-logind[1202]: New seat seat0. Jul 14 22:09:14.946341 bash[1242]: Updated "/home/core/.ssh/authorized_keys" Jul 14 22:09:14.947264 systemd[1]: Started systemd-logind.service. Jul 14 22:09:14.949763 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 14 22:09:14.950391 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 14 22:09:14.952644 update_engine[1207]: I0714 22:09:14.952284 1207 main.cc:92] Flatcar Update Engine starting Jul 14 22:09:14.957083 systemd[1]: Started update-engine.service. Jul 14 22:09:14.962878 update_engine[1207]: I0714 22:09:14.959482 1207 update_check_scheduler.cc:74] Next update check in 8m39s Jul 14 22:09:14.968023 extend-filesystems[1229]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 14 22:09:14.968023 extend-filesystems[1229]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 14 22:09:14.968023 extend-filesystems[1229]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 14 22:09:14.963452 systemd[1]: Started locksmithd.service. Jul 14 22:09:14.973176 env[1215]: time="2025-07-14T22:09:14.969563868Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 14 22:09:14.973333 extend-filesystems[1193]: Resized filesystem in /dev/vda9 Jul 14 22:09:14.969573 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 14 22:09:14.969754 systemd[1]: Finished extend-filesystems.service. Jul 14 22:09:14.995627 env[1215]: time="2025-07-14T22:09:14.995565988Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 14 22:09:14.995784 env[1215]: time="2025-07-14T22:09:14.995759788Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 14 22:09:14.997237 env[1215]: time="2025-07-14T22:09:14.997191108Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.187-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 14 22:09:14.997237 env[1215]: time="2025-07-14T22:09:14.997230348Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 14 22:09:14.997515 env[1215]: time="2025-07-14T22:09:14.997487548Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 22:09:14.997515 env[1215]: time="2025-07-14T22:09:14.997512788Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 14 22:09:14.997571 env[1215]: time="2025-07-14T22:09:14.997527468Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 14 22:09:14.997571 env[1215]: time="2025-07-14T22:09:14.997537788Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 14 22:09:14.997634 env[1215]: time="2025-07-14T22:09:14.997615228Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 14 22:09:14.997994 env[1215]: time="2025-07-14T22:09:14.997968748Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 14 22:09:14.998116 env[1215]: time="2025-07-14T22:09:14.998094668Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 22:09:14.998116 env[1215]: time="2025-07-14T22:09:14.998113748Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 14 22:09:14.998196 env[1215]: time="2025-07-14T22:09:14.998178348Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 14 22:09:14.998196 env[1215]: time="2025-07-14T22:09:14.998193588Z" level=info msg="metadata content store policy set" policy=shared Jul 14 22:09:15.001540 env[1215]: time="2025-07-14T22:09:15.001496668Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 14 22:09:15.001540 env[1215]: time="2025-07-14T22:09:15.001541908Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 14 22:09:15.001665 env[1215]: time="2025-07-14T22:09:15.001556588Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 14 22:09:15.001665 env[1215]: time="2025-07-14T22:09:15.001602988Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 14 22:09:15.001665 env[1215]: time="2025-07-14T22:09:15.001619268Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 14 22:09:15.001665 env[1215]: time="2025-07-14T22:09:15.001633628Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 14 22:09:15.001758 env[1215]: time="2025-07-14T22:09:15.001646628Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 14 22:09:15.002230 env[1215]: time="2025-07-14T22:09:15.002204068Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 14 22:09:15.002308 env[1215]: time="2025-07-14T22:09:15.002232028Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 14 22:09:15.002308 env[1215]: time="2025-07-14T22:09:15.002246988Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 14 22:09:15.002308 env[1215]: time="2025-07-14T22:09:15.002259828Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 14 22:09:15.002410 env[1215]: time="2025-07-14T22:09:15.002281748Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 14 22:09:15.002555 env[1215]: time="2025-07-14T22:09:15.002535748Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 14 22:09:15.002722 env[1215]: time="2025-07-14T22:09:15.002699268Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 14 22:09:15.003035 env[1215]: time="2025-07-14T22:09:15.003002948Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 14 22:09:15.003087 env[1215]: time="2025-07-14T22:09:15.003051988Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003087 env[1215]: time="2025-07-14T22:09:15.003067908Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 14 22:09:15.003192 env[1215]: time="2025-07-14T22:09:15.003171668Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003225 env[1215]: time="2025-07-14T22:09:15.003190428Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003225 env[1215]: time="2025-07-14T22:09:15.003204748Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003225 env[1215]: time="2025-07-14T22:09:15.003216388Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003285 env[1215]: time="2025-07-14T22:09:15.003228828Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003285 env[1215]: time="2025-07-14T22:09:15.003241108Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003285 env[1215]: time="2025-07-14T22:09:15.003252068Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003285 env[1215]: time="2025-07-14T22:09:15.003263348Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003285 env[1215]: time="2025-07-14T22:09:15.003278468Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 14 22:09:15.003466 env[1215]: time="2025-07-14T22:09:15.003444948Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003499 env[1215]: time="2025-07-14T22:09:15.003466108Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003499 env[1215]: time="2025-07-14T22:09:15.003479108Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003499 env[1215]: time="2025-07-14T22:09:15.003490748Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 14 22:09:15.003555 env[1215]: time="2025-07-14T22:09:15.003504628Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 14 22:09:15.003555 env[1215]: time="2025-07-14T22:09:15.003516428Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 14 22:09:15.003555 env[1215]: time="2025-07-14T22:09:15.003532428Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 14 22:09:15.003618 env[1215]: time="2025-07-14T22:09:15.003565108Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 14 22:09:15.003816 env[1215]: time="2025-07-14T22:09:15.003763868Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 14 22:09:15.007572 env[1215]: time="2025-07-14T22:09:15.003823668Z" level=info msg="Connect containerd service" Jul 14 22:09:15.007572 env[1215]: time="2025-07-14T22:09:15.003859508Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 14 22:09:15.007572 env[1215]: time="2025-07-14T22:09:15.004488788Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 22:09:15.007572 env[1215]: time="2025-07-14T22:09:15.004846748Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 14 22:09:15.007572 env[1215]: time="2025-07-14T22:09:15.004885108Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 14 22:09:15.007572 env[1215]: time="2025-07-14T22:09:15.004927108Z" level=info msg="containerd successfully booted in 0.043484s" Jul 14 22:09:15.007572 env[1215]: time="2025-07-14T22:09:15.006961468Z" level=info msg="Start subscribing containerd event" Jul 14 22:09:15.006493 systemd[1]: Started containerd.service. Jul 14 22:09:15.008114 env[1215]: time="2025-07-14T22:09:15.008079828Z" level=info msg="Start recovering state" Jul 14 22:09:15.008204 env[1215]: time="2025-07-14T22:09:15.008179588Z" level=info msg="Start event monitor" Jul 14 22:09:15.008240 env[1215]: time="2025-07-14T22:09:15.008232228Z" level=info msg="Start snapshots syncer" Jul 14 22:09:15.008262 env[1215]: time="2025-07-14T22:09:15.008247548Z" level=info msg="Start cni network conf syncer for default" Jul 14 22:09:15.008262 env[1215]: time="2025-07-14T22:09:15.008260228Z" level=info msg="Start streaming server" Jul 14 22:09:15.028285 locksmithd[1245]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 14 22:09:15.310900 tar[1213]: linux-arm64/README.md Jul 14 22:09:15.315529 systemd[1]: Finished prepare-helm.service. Jul 14 22:09:16.024526 systemd-networkd[1046]: eth0: Gained IPv6LL Jul 14 22:09:16.026131 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 14 22:09:16.027406 systemd[1]: Reached target network-online.target. Jul 14 22:09:16.029802 systemd[1]: Starting kubelet.service... Jul 14 22:09:16.139894 sshd_keygen[1211]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 14 22:09:16.157068 systemd[1]: Finished sshd-keygen.service. Jul 14 22:09:16.159563 systemd[1]: Starting issuegen.service... Jul 14 22:09:16.164571 systemd[1]: issuegen.service: Deactivated successfully. Jul 14 22:09:16.164742 systemd[1]: Finished issuegen.service. Jul 14 22:09:16.167084 systemd[1]: Starting systemd-user-sessions.service... Jul 14 22:09:16.175207 systemd[1]: Finished systemd-user-sessions.service. Jul 14 22:09:16.177600 systemd[1]: Started getty@tty1.service. Jul 14 22:09:16.179790 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 14 22:09:16.180865 systemd[1]: Reached target getty.target. Jul 14 22:09:16.638899 systemd[1]: Started kubelet.service. Jul 14 22:09:16.640216 systemd[1]: Reached target multi-user.target. Jul 14 22:09:16.642471 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 14 22:09:16.649114 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 14 22:09:16.649282 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 14 22:09:16.650425 systemd[1]: Startup finished in 575ms (kernel) + 44.458s (initrd) + 5.095s (userspace) = 50.129s. Jul 14 22:09:17.069183 kubelet[1272]: E0714 22:09:17.069074 1272 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:09:17.070597 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:09:17.070732 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:09:20.091777 systemd[1]: Created slice system-sshd.slice. Jul 14 22:09:20.092917 systemd[1]: Started sshd@0-10.0.0.118:22-10.0.0.1:34564.service. Jul 14 22:09:20.131052 sshd[1281]: Accepted publickey for core from 10.0.0.1 port 34564 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:09:20.133132 sshd[1281]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:09:20.141853 systemd-logind[1202]: New session 1 of user core. Jul 14 22:09:20.142799 systemd[1]: Created slice user-500.slice. Jul 14 22:09:20.143907 systemd[1]: Starting user-runtime-dir@500.service... Jul 14 22:09:20.155358 systemd[1]: Finished user-runtime-dir@500.service. Jul 14 22:09:20.156755 systemd[1]: Starting user@500.service... Jul 14 22:09:20.159422 (systemd)[1284]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:09:20.217862 systemd[1284]: Queued start job for default target default.target. Jul 14 22:09:20.218479 systemd[1284]: Reached target paths.target. Jul 14 22:09:20.218512 systemd[1284]: Reached target sockets.target. Jul 14 22:09:20.218523 systemd[1284]: Reached target timers.target. Jul 14 22:09:20.218532 systemd[1284]: Reached target basic.target. Jul 14 22:09:20.218572 systemd[1284]: Reached target default.target. Jul 14 22:09:20.218595 systemd[1284]: Startup finished in 53ms. Jul 14 22:09:20.218645 systemd[1]: Started user@500.service. Jul 14 22:09:20.219632 systemd[1]: Started session-1.scope. Jul 14 22:09:20.271300 systemd[1]: Started sshd@1-10.0.0.118:22-10.0.0.1:34578.service. Jul 14 22:09:20.302589 sshd[1293]: Accepted publickey for core from 10.0.0.1 port 34578 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:09:20.303812 sshd[1293]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:09:20.308431 systemd-logind[1202]: New session 2 of user core. Jul 14 22:09:20.308547 systemd[1]: Started session-2.scope. Jul 14 22:09:20.362469 sshd[1293]: pam_unix(sshd:session): session closed for user core Jul 14 22:09:20.366594 systemd[1]: Started sshd@2-10.0.0.118:22-10.0.0.1:34586.service. Jul 14 22:09:20.367081 systemd[1]: sshd@1-10.0.0.118:22-10.0.0.1:34578.service: Deactivated successfully. Jul 14 22:09:20.367738 systemd[1]: session-2.scope: Deactivated successfully. Jul 14 22:09:20.368262 systemd-logind[1202]: Session 2 logged out. Waiting for processes to exit. Jul 14 22:09:20.369117 systemd-logind[1202]: Removed session 2. Jul 14 22:09:20.397299 sshd[1298]: Accepted publickey for core from 10.0.0.1 port 34586 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:09:20.398740 sshd[1298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:09:20.401835 systemd-logind[1202]: New session 3 of user core. Jul 14 22:09:20.402637 systemd[1]: Started session-3.scope. Jul 14 22:09:20.452542 sshd[1298]: pam_unix(sshd:session): session closed for user core Jul 14 22:09:20.456134 systemd[1]: sshd@2-10.0.0.118:22-10.0.0.1:34586.service: Deactivated successfully. Jul 14 22:09:20.456709 systemd[1]: session-3.scope: Deactivated successfully. Jul 14 22:09:20.457216 systemd-logind[1202]: Session 3 logged out. Waiting for processes to exit. Jul 14 22:09:20.458276 systemd[1]: Started sshd@3-10.0.0.118:22-10.0.0.1:34588.service. Jul 14 22:09:20.458967 systemd-logind[1202]: Removed session 3. Jul 14 22:09:20.489022 sshd[1305]: Accepted publickey for core from 10.0.0.1 port 34588 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:09:20.490160 sshd[1305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:09:20.493391 systemd-logind[1202]: New session 4 of user core. Jul 14 22:09:20.494182 systemd[1]: Started session-4.scope. Jul 14 22:09:20.547484 sshd[1305]: pam_unix(sshd:session): session closed for user core Jul 14 22:09:20.551386 systemd[1]: sshd@3-10.0.0.118:22-10.0.0.1:34588.service: Deactivated successfully. Jul 14 22:09:20.551965 systemd[1]: session-4.scope: Deactivated successfully. Jul 14 22:09:20.552479 systemd-logind[1202]: Session 4 logged out. Waiting for processes to exit. Jul 14 22:09:20.553553 systemd[1]: Started sshd@4-10.0.0.118:22-10.0.0.1:34594.service. Jul 14 22:09:20.554209 systemd-logind[1202]: Removed session 4. Jul 14 22:09:20.584065 sshd[1311]: Accepted publickey for core from 10.0.0.1 port 34594 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:09:20.585460 sshd[1311]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:09:20.588528 systemd-logind[1202]: New session 5 of user core. Jul 14 22:09:20.589313 systemd[1]: Started session-5.scope. Jul 14 22:09:20.647017 sudo[1314]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 14 22:09:20.647243 sudo[1314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 22:09:20.659526 dbus-daemon[1191]: avc: received setenforce notice (enforcing=1) Jul 14 22:09:20.660360 sudo[1314]: pam_unix(sudo:session): session closed for user root Jul 14 22:09:20.662307 sshd[1311]: pam_unix(sshd:session): session closed for user core Jul 14 22:09:20.665407 systemd[1]: sshd@4-10.0.0.118:22-10.0.0.1:34594.service: Deactivated successfully. Jul 14 22:09:20.666057 systemd[1]: session-5.scope: Deactivated successfully. Jul 14 22:09:20.666651 systemd-logind[1202]: Session 5 logged out. Waiting for processes to exit. Jul 14 22:09:20.668360 systemd[1]: Started sshd@5-10.0.0.118:22-10.0.0.1:34608.service. Jul 14 22:09:20.669175 systemd-logind[1202]: Removed session 5. Jul 14 22:09:20.699096 sshd[1318]: Accepted publickey for core from 10.0.0.1 port 34608 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:09:20.700485 sshd[1318]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:09:20.703407 systemd-logind[1202]: New session 6 of user core. Jul 14 22:09:20.704731 systemd[1]: Started session-6.scope. Jul 14 22:09:20.756069 sudo[1322]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 14 22:09:20.756300 sudo[1322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 22:09:20.758868 sudo[1322]: pam_unix(sudo:session): session closed for user root Jul 14 22:09:20.763278 sudo[1321]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 14 22:09:20.763529 sudo[1321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 22:09:20.771935 systemd[1]: Stopping audit-rules.service... Jul 14 22:09:20.771000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 22:09:20.773227 auditctl[1325]: No rules Jul 14 22:09:20.773706 kernel: kauditd_printk_skb: 161 callbacks suppressed Jul 14 22:09:20.773756 kernel: audit: type=1305 audit(1752530960.771:194): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 22:09:20.774614 systemd[1]: audit-rules.service: Deactivated successfully. Jul 14 22:09:20.774780 systemd[1]: Stopped audit-rules.service. Jul 14 22:09:20.771000 audit[1325]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff6ef7230 a2=420 a3=0 items=0 ppid=1 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:20.779041 kernel: audit: type=1300 audit(1752530960.771:194): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff6ef7230 a2=420 a3=0 items=0 ppid=1 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:20.779073 kernel: audit: type=1327 audit(1752530960.771:194): proctitle=2F7362696E2F617564697463746C002D44 Jul 14 22:09:20.771000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 14 22:09:20.776157 systemd[1]: Starting audit-rules.service... Jul 14 22:09:20.781463 kernel: audit: type=1131 audit(1752530960.773:195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.792066 augenrules[1342]: No rules Jul 14 22:09:20.792666 systemd[1]: Finished audit-rules.service. Jul 14 22:09:20.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.793449 sudo[1321]: pam_unix(sudo:session): session closed for user root Jul 14 22:09:20.794861 sshd[1318]: pam_unix(sshd:session): session closed for user core Jul 14 22:09:20.792000 audit[1321]: USER_END pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.798030 systemd[1]: sshd@5-10.0.0.118:22-10.0.0.1:34608.service: Deactivated successfully. Jul 14 22:09:20.798515 kernel: audit: type=1130 audit(1752530960.791:196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.798561 kernel: audit: type=1106 audit(1752530960.792:197): pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.798577 kernel: audit: type=1104 audit(1752530960.792:198): pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.792000 audit[1321]: CRED_DISP pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.798605 systemd[1]: session-6.scope: Deactivated successfully. Jul 14 22:09:20.799168 systemd-logind[1202]: Session 6 logged out. Waiting for processes to exit. Jul 14 22:09:20.800190 systemd[1]: Started sshd@6-10.0.0.118:22-10.0.0.1:34618.service. Jul 14 22:09:20.801147 kernel: audit: type=1106 audit(1752530960.794:199): pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:09:20.794000 audit[1318]: USER_END pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:09:20.800984 systemd-logind[1202]: Removed session 6. Jul 14 22:09:20.794000 audit[1318]: CRED_DISP pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:09:20.807301 kernel: audit: type=1104 audit(1752530960.794:200): pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:09:20.807356 kernel: audit: type=1131 audit(1752530960.796:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.118:22-10.0.0.1:34608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.118:22-10.0.0.1:34608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.118:22-10.0.0.1:34618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.831000 audit[1348]: USER_ACCT pid=1348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:09:20.833139 sshd[1348]: Accepted publickey for core from 10.0.0.1 port 34618 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:09:20.832000 audit[1348]: CRED_ACQ pid=1348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:09:20.832000 audit[1348]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca841940 a2=3 a3=1 items=0 ppid=1 pid=1348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:20.832000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:09:20.834403 sshd[1348]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:09:20.838174 systemd-logind[1202]: New session 7 of user core. Jul 14 22:09:20.838606 systemd[1]: Started session-7.scope. Jul 14 22:09:20.840000 audit[1348]: USER_START pid=1348 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:09:20.842000 audit[1350]: CRED_ACQ pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:09:20.889915 sudo[1351]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 14 22:09:20.890131 sudo[1351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 22:09:20.888000 audit[1351]: USER_ACCT pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.888000 audit[1351]: CRED_REFR pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.890000 audit[1351]: USER_START pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:09:20.944710 systemd[1]: Starting docker.service... Jul 14 22:09:21.021245 env[1362]: time="2025-07-14T22:09:21.021192428Z" level=info msg="Starting up" Jul 14 22:09:21.022786 env[1362]: time="2025-07-14T22:09:21.022756308Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 22:09:21.022873 env[1362]: time="2025-07-14T22:09:21.022859788Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 22:09:21.022936 env[1362]: time="2025-07-14T22:09:21.022919548Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 22:09:21.022984 env[1362]: time="2025-07-14T22:09:21.022972588Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 22:09:21.025149 env[1362]: time="2025-07-14T22:09:21.025116708Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 22:09:21.025149 env[1362]: time="2025-07-14T22:09:21.025142868Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 22:09:21.025243 env[1362]: time="2025-07-14T22:09:21.025159148Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 22:09:21.025243 env[1362]: time="2025-07-14T22:09:21.025168348Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 22:09:21.199510 env[1362]: time="2025-07-14T22:09:21.199416548Z" level=info msg="Loading containers: start." Jul 14 22:09:21.248000 audit[1396]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.248000 audit[1396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffdcaef700 a2=0 a3=1 items=0 ppid=1362 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.248000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 14 22:09:21.250000 audit[1398]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.250000 audit[1398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc8bb1450 a2=0 a3=1 items=0 ppid=1362 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.250000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 14 22:09:21.252000 audit[1400]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.252000 audit[1400]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffccc0d610 a2=0 a3=1 items=0 ppid=1362 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.252000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 22:09:21.254000 audit[1402]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.254000 audit[1402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd0af0800 a2=0 a3=1 items=0 ppid=1362 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.254000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 22:09:21.256000 audit[1404]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.256000 audit[1404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc33312a0 a2=0 a3=1 items=0 ppid=1362 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.256000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 14 22:09:21.288000 audit[1409]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.288000 audit[1409]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffead45ef0 a2=0 a3=1 items=0 ppid=1362 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.288000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 14 22:09:21.295000 audit[1411]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.295000 audit[1411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd4252050 a2=0 a3=1 items=0 ppid=1362 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.295000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 14 22:09:21.297000 audit[1413]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.297000 audit[1413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe5103790 a2=0 a3=1 items=0 ppid=1362 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.297000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 14 22:09:21.299000 audit[1415]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.299000 audit[1415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffe9e09700 a2=0 a3=1 items=0 ppid=1362 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.299000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:09:21.306000 audit[1419]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.306000 audit[1419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcee8e8e0 a2=0 a3=1 items=0 ppid=1362 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.306000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:09:21.322000 audit[1420]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.322000 audit[1420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc0a7a3b0 a2=0 a3=1 items=0 ppid=1362 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.322000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:09:21.332401 kernel: Initializing XFRM netlink socket Jul 14 22:09:21.354937 env[1362]: time="2025-07-14T22:09:21.354882348Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 14 22:09:21.370000 audit[1428]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.370000 audit[1428]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffcd55c060 a2=0 a3=1 items=0 ppid=1362 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.370000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 14 22:09:21.385000 audit[1431]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.385000 audit[1431]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffef84e280 a2=0 a3=1 items=0 ppid=1362 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.385000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 14 22:09:21.388000 audit[1434]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.388000 audit[1434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffeb80ed20 a2=0 a3=1 items=0 ppid=1362 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.388000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 14 22:09:21.390000 audit[1436]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.390000 audit[1436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffeb8945e0 a2=0 a3=1 items=0 ppid=1362 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.390000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 14 22:09:21.392000 audit[1438]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.392000 audit[1438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffc90ca860 a2=0 a3=1 items=0 ppid=1362 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.392000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 14 22:09:21.394000 audit[1440]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.394000 audit[1440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffff12f540 a2=0 a3=1 items=0 ppid=1362 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.394000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 14 22:09:21.396000 audit[1442]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.396000 audit[1442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffc68fec80 a2=0 a3=1 items=0 ppid=1362 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.396000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 14 22:09:21.404000 audit[1445]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.404000 audit[1445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffd6f36ee0 a2=0 a3=1 items=0 ppid=1362 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.404000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 14 22:09:21.406000 audit[1447]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.406000 audit[1447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffcd592260 a2=0 a3=1 items=0 ppid=1362 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.406000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 22:09:21.408000 audit[1449]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.408000 audit[1449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffed8e9710 a2=0 a3=1 items=0 ppid=1362 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.408000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 22:09:21.409000 audit[1451]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.409000 audit[1451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffda585c70 a2=0 a3=1 items=0 ppid=1362 pid=1451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.409000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 14 22:09:21.411612 systemd-networkd[1046]: docker0: Link UP Jul 14 22:09:21.490000 audit[1455]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1455 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.490000 audit[1455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd4f8d380 a2=0 a3=1 items=0 ppid=1362 pid=1455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.490000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:09:21.499000 audit[1456]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:09:21.499000 audit[1456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffcf009df0 a2=0 a3=1 items=0 ppid=1362 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:09:21.499000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:09:21.501858 env[1362]: time="2025-07-14T22:09:21.501808948Z" level=info msg="Loading containers: done." Jul 14 22:09:21.517350 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1442960085-merged.mount: Deactivated successfully. Jul 14 22:09:21.523105 env[1362]: time="2025-07-14T22:09:21.523067028Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 14 22:09:21.523445 env[1362]: time="2025-07-14T22:09:21.523426948Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 14 22:09:21.523627 env[1362]: time="2025-07-14T22:09:21.523609868Z" level=info msg="Daemon has completed initialization" Jul 14 22:09:21.537550 systemd[1]: Started docker.service. Jul 14 22:09:21.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:21.546017 env[1362]: time="2025-07-14T22:09:21.545966948Z" level=info msg="API listen on /run/docker.sock" Jul 14 22:09:27.082897 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 14 22:09:27.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:27.083069 systemd[1]: Stopped kubelet.service. Jul 14 22:09:27.083751 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 14 22:09:27.083802 kernel: audit: type=1130 audit(1752530967.081:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:27.084506 systemd[1]: Starting kubelet.service... Jul 14 22:09:27.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:27.088579 kernel: audit: type=1131 audit(1752530967.081:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:27.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:27.179284 systemd[1]: Started kubelet.service. Jul 14 22:09:27.182443 kernel: audit: type=1130 audit(1752530967.178:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:27.214979 kubelet[1494]: E0714 22:09:27.214924 1494 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:09:27.217702 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:09:27.217827 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:09:27.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:09:27.221407 kernel: audit: type=1131 audit(1752530967.216:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:09:31.896042 env[1215]: time="2025-07-14T22:09:31.896000828Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.4\"" Jul 14 22:09:37.333057 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 14 22:09:37.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:37.333229 systemd[1]: Stopped kubelet.service. Jul 14 22:09:37.334611 systemd[1]: Starting kubelet.service... Jul 14 22:09:37.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:37.338205 kernel: audit: type=1130 audit(1752530977.331:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:37.338259 kernel: audit: type=1131 audit(1752530977.331:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:37.428308 systemd[1]: Started kubelet.service. Jul 14 22:09:37.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:37.431405 kernel: audit: type=1130 audit(1752530977.427:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:37.461543 kubelet[1507]: E0714 22:09:37.461496 1507 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:09:37.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:09:37.463835 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:09:37.463949 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:09:37.467405 kernel: audit: type=1131 audit(1752530977.462:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:09:42.894101 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1677064846.mount: Deactivated successfully. Jul 14 22:09:44.429323 env[1215]: time="2025-07-14T22:09:44.429252748Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:44.431457 env[1215]: time="2025-07-14T22:09:44.431417428Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ab579d62aa850c7d0eca948aad11fcf813743e3b6c9742241c32cb4f1638968b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:44.433955 env[1215]: time="2025-07-14T22:09:44.433920228Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:44.438365 env[1215]: time="2025-07-14T22:09:44.438329588Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:631c6cc78b2862be4fed7df3384a643ef7297eebadae22e8ef9cbe2e19b6386f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:44.439116 env[1215]: time="2025-07-14T22:09:44.439075548Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.4\" returns image reference \"sha256:ab579d62aa850c7d0eca948aad11fcf813743e3b6c9742241c32cb4f1638968b\"" Jul 14 22:09:44.439879 env[1215]: time="2025-07-14T22:09:44.439848108Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.4\"" Jul 14 22:09:46.047589 env[1215]: time="2025-07-14T22:09:46.047541788Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:46.049110 env[1215]: time="2025-07-14T22:09:46.049074908Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:79534fade29d07745acc698bbf598b0604a9ea1fd7917822c816a74fc0b55965,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:46.050788 env[1215]: time="2025-07-14T22:09:46.050754908Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:46.052585 env[1215]: time="2025-07-14T22:09:46.052552868Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:25e29187ea66f0ff9b9a00114849c3a30b649005c900a8b2a69e3f3fa56448fb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:46.053411 env[1215]: time="2025-07-14T22:09:46.053363308Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.4\" returns image reference \"sha256:79534fade29d07745acc698bbf598b0604a9ea1fd7917822c816a74fc0b55965\"" Jul 14 22:09:46.054125 env[1215]: time="2025-07-14T22:09:46.054097828Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.4\"" Jul 14 22:09:47.543805 env[1215]: time="2025-07-14T22:09:47.543756455Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:47.555094 env[1215]: time="2025-07-14T22:09:47.555047563Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:730fbc2590716b8202fcdd928a813b847575ebf03911a059979257cd6cbb8245,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:47.569076 env[1215]: time="2025-07-14T22:09:47.569038649Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:47.574237 env[1215]: time="2025-07-14T22:09:47.574206647Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:09c55f8dac59a4b8e5e354140f5a4bdd6fa9bd95c42d6bcba6782ed37c31b5a2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:47.574996 env[1215]: time="2025-07-14T22:09:47.574966561Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.4\" returns image reference \"sha256:730fbc2590716b8202fcdd928a813b847575ebf03911a059979257cd6cbb8245\"" Jul 14 22:09:47.576210 env[1215]: time="2025-07-14T22:09:47.576187111Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.4\"" Jul 14 22:09:47.582824 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 14 22:09:47.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:47.582991 systemd[1]: Stopped kubelet.service. Jul 14 22:09:47.584314 systemd[1]: Starting kubelet.service... Jul 14 22:09:47.581000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:47.588041 kernel: audit: type=1130 audit(1752530987.581:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:47.588090 kernel: audit: type=1131 audit(1752530987.581:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:47.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:47.706217 systemd[1]: Started kubelet.service. Jul 14 22:09:47.709406 kernel: audit: type=1130 audit(1752530987.705:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:47.743783 kubelet[1520]: E0714 22:09:47.743733 1520 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:09:47.745290 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:09:47.745433 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:09:47.744000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:09:47.748402 kernel: audit: type=1131 audit(1752530987.744:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:09:48.749245 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2821226249.mount: Deactivated successfully. Jul 14 22:09:49.287923 env[1215]: time="2025-07-14T22:09:49.287862415Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:49.289459 env[1215]: time="2025-07-14T22:09:49.289422604Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:62c496efa595c8eb7d098e43430b2b94ad66812214759a7ea9daaaa1ed901fc7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:49.293960 env[1215]: time="2025-07-14T22:09:49.293930092Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:49.295130 env[1215]: time="2025-07-14T22:09:49.295104963Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:152638222ecf265eb8e5352e3c50e8fc520994e8ffcff1ee1490c975f7fc2b36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:49.295521 env[1215]: time="2025-07-14T22:09:49.295491921Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.4\" returns image reference \"sha256:62c496efa595c8eb7d098e43430b2b94ad66812214759a7ea9daaaa1ed901fc7\"" Jul 14 22:09:49.295988 env[1215]: time="2025-07-14T22:09:49.295963877Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 14 22:09:49.809091 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1379849383.mount: Deactivated successfully. Jul 14 22:09:50.801588 env[1215]: time="2025-07-14T22:09:50.801520789Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:50.836116 env[1215]: time="2025-07-14T22:09:50.836064597Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:50.837980 env[1215]: time="2025-07-14T22:09:50.837947425Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:50.840155 env[1215]: time="2025-07-14T22:09:50.840126210Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:50.840997 env[1215]: time="2025-07-14T22:09:50.840963245Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Jul 14 22:09:50.841615 env[1215]: time="2025-07-14T22:09:50.841594440Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 14 22:09:51.266322 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount147718640.mount: Deactivated successfully. Jul 14 22:09:51.270936 env[1215]: time="2025-07-14T22:09:51.270874955Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:51.272996 env[1215]: time="2025-07-14T22:09:51.272958062Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:51.273971 env[1215]: time="2025-07-14T22:09:51.273930776Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:51.275112 env[1215]: time="2025-07-14T22:09:51.275085089Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:51.275753 env[1215]: time="2025-07-14T22:09:51.275724845Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 14 22:09:51.276626 env[1215]: time="2025-07-14T22:09:51.276599799Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Jul 14 22:09:51.800816 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1279195016.mount: Deactivated successfully. Jul 14 22:09:54.214186 env[1215]: time="2025-07-14T22:09:54.214115646Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:54.215572 env[1215]: time="2025-07-14T22:09:54.215544958Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:54.218353 env[1215]: time="2025-07-14T22:09:54.218322184Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:54.220074 env[1215]: time="2025-07-14T22:09:54.220036855Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:09:54.221873 env[1215]: time="2025-07-14T22:09:54.221826046Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Jul 14 22:09:57.832943 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 14 22:09:57.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:57.833112 systemd[1]: Stopped kubelet.service. Jul 14 22:09:57.834483 systemd[1]: Starting kubelet.service... Jul 14 22:09:57.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:57.838083 kernel: audit: type=1130 audit(1752530997.831:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:57.838147 kernel: audit: type=1131 audit(1752530997.831:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:57.928035 systemd[1]: Started kubelet.service. Jul 14 22:09:57.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:57.931400 kernel: audit: type=1130 audit(1752530997.926:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:09:57.960779 kubelet[1537]: E0714 22:09:57.960716 1537 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:09:57.962709 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:09:57.962839 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:09:57.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:09:57.966403 kernel: audit: type=1131 audit(1752530997.961:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:10:00.561566 update_engine[1207]: I0714 22:10:00.561493 1207 update_attempter.cc:509] Updating boot flags... Jul 14 22:10:08.082889 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Jul 14 22:10:08.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:08.083065 systemd[1]: Stopped kubelet.service. Jul 14 22:10:08.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:08.084491 systemd[1]: Starting kubelet.service... Jul 14 22:10:08.088489 kernel: audit: type=1130 audit(1752531008.081:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:08.088565 kernel: audit: type=1131 audit(1752531008.081:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:08.205353 systemd[1]: Started kubelet.service. Jul 14 22:10:08.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:08.208509 kernel: audit: type=1130 audit(1752531008.204:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:08.239713 kubelet[1577]: E0714 22:10:08.239666 1577 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:10:08.241641 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:10:08.241766 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:10:08.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:10:08.245402 kernel: audit: type=1131 audit(1752531008.240:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:10:09.819636 systemd[1]: Stopped kubelet.service. Jul 14 22:10:09.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:09.821992 systemd[1]: Starting kubelet.service... Jul 14 22:10:09.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:09.824819 kernel: audit: type=1130 audit(1752531009.818:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:09.824874 kernel: audit: type=1131 audit(1752531009.818:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:09.846133 systemd[1]: Reloading. Jul 14 22:10:09.912636 /usr/lib/systemd/system-generators/torcx-generator[1613]: time="2025-07-14T22:10:09Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 22:10:09.912665 /usr/lib/systemd/system-generators/torcx-generator[1613]: time="2025-07-14T22:10:09Z" level=info msg="torcx already run" Jul 14 22:10:10.044296 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 22:10:10.044314 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 22:10:10.059731 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 22:10:10.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.112609 kernel: audit: type=1400 audit(1752531010.106:258): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.112654 kernel: audit: type=1400 audit(1752531010.106:259): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.112680 kernel: audit: type=1400 audit(1752531010.106:260): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117110 kernel: audit: type=1400 audit(1752531010.106:261): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.109000 audit: BPF prog-id=40 op=LOAD Jul 14 22:10:10.109000 audit: BPF prog-id=34 op=UNLOAD Jul 14 22:10:10.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.111000 audit: BPF prog-id=41 op=LOAD Jul 14 22:10:10.111000 audit: BPF prog-id=24 op=UNLOAD Jul 14 22:10:10.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.113000 audit: BPF prog-id=42 op=LOAD Jul 14 22:10:10.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.115000 audit: BPF prog-id=43 op=LOAD Jul 14 22:10:10.115000 audit: BPF prog-id=25 op=UNLOAD Jul 14 22:10:10.115000 audit: BPF prog-id=26 op=UNLOAD Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit: BPF prog-id=44 op=LOAD Jul 14 22:10:10.117000 audit: BPF prog-id=35 op=UNLOAD Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit: BPF prog-id=45 op=LOAD Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit: BPF prog-id=46 op=LOAD Jul 14 22:10:10.117000 audit: BPF prog-id=36 op=UNLOAD Jul 14 22:10:10.117000 audit: BPF prog-id=37 op=UNLOAD Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit: BPF prog-id=47 op=LOAD Jul 14 22:10:10.117000 audit: BPF prog-id=27 op=UNLOAD Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit: BPF prog-id=48 op=LOAD Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.117000 audit: BPF prog-id=49 op=LOAD Jul 14 22:10:10.117000 audit: BPF prog-id=28 op=UNLOAD Jul 14 22:10:10.117000 audit: BPF prog-id=29 op=UNLOAD Jul 14 22:10:10.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.118000 audit: BPF prog-id=50 op=LOAD Jul 14 22:10:10.118000 audit: BPF prog-id=30 op=UNLOAD Jul 14 22:10:10.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.120000 audit: BPF prog-id=51 op=LOAD Jul 14 22:10:10.120000 audit: BPF prog-id=38 op=UNLOAD Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit: BPF prog-id=52 op=LOAD Jul 14 22:10:10.121000 audit: BPF prog-id=33 op=UNLOAD Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit: BPF prog-id=53 op=LOAD Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.121000 audit: BPF prog-id=54 op=LOAD Jul 14 22:10:10.121000 audit: BPF prog-id=31 op=UNLOAD Jul 14 22:10:10.121000 audit: BPF prog-id=32 op=UNLOAD Jul 14 22:10:10.131551 systemd[1]: Started kubelet.service. Jul 14 22:10:10.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:10.134763 systemd[1]: Stopping kubelet.service... Jul 14 22:10:10.135199 systemd[1]: kubelet.service: Deactivated successfully. Jul 14 22:10:10.135494 systemd[1]: Stopped kubelet.service. Jul 14 22:10:10.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:10.137202 systemd[1]: Starting kubelet.service... Jul 14 22:10:10.265549 systemd[1]: Started kubelet.service. Jul 14 22:10:10.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:10.298109 kubelet[1661]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 22:10:10.298109 kubelet[1661]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 14 22:10:10.298109 kubelet[1661]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 22:10:10.298463 kubelet[1661]: I0714 22:10:10.298176 1661 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 22:10:10.873592 kubelet[1661]: I0714 22:10:10.873542 1661 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 14 22:10:10.873592 kubelet[1661]: I0714 22:10:10.873577 1661 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 22:10:10.873885 kubelet[1661]: I0714 22:10:10.873860 1661 server.go:954] "Client rotation is on, will bootstrap in background" Jul 14 22:10:10.906853 kubelet[1661]: E0714 22:10:10.906814 1661 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.118:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.118:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:10:10.907825 kubelet[1661]: I0714 22:10:10.907797 1661 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 22:10:10.913830 kubelet[1661]: E0714 22:10:10.913795 1661 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 22:10:10.913830 kubelet[1661]: I0714 22:10:10.913825 1661 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 22:10:10.918400 kubelet[1661]: I0714 22:10:10.918371 1661 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 22:10:10.919673 kubelet[1661]: I0714 22:10:10.919532 1661 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 22:10:10.919910 kubelet[1661]: I0714 22:10:10.919748 1661 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 22:10:10.920113 kubelet[1661]: I0714 22:10:10.920099 1661 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 22:10:10.920170 kubelet[1661]: I0714 22:10:10.920161 1661 container_manager_linux.go:304] "Creating device plugin manager" Jul 14 22:10:10.920694 kubelet[1661]: I0714 22:10:10.920669 1661 state_mem.go:36] "Initialized new in-memory state store" Jul 14 22:10:10.924465 kubelet[1661]: I0714 22:10:10.924439 1661 kubelet.go:446] "Attempting to sync node with API server" Jul 14 22:10:10.924572 kubelet[1661]: I0714 22:10:10.924559 1661 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 22:10:10.924637 kubelet[1661]: I0714 22:10:10.924627 1661 kubelet.go:352] "Adding apiserver pod source" Jul 14 22:10:10.924693 kubelet[1661]: I0714 22:10:10.924684 1661 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 22:10:10.928993 kubelet[1661]: W0714 22:10:10.928928 1661 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.118:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.118:6443: connect: connection refused Jul 14 22:10:10.929076 kubelet[1661]: E0714 22:10:10.929000 1661 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.118:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.118:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:10:10.929169 kubelet[1661]: W0714 22:10:10.929130 1661 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.118:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.118:6443: connect: connection refused Jul 14 22:10:10.929256 kubelet[1661]: E0714 22:10:10.929238 1661 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.118:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.118:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:10:10.930221 kubelet[1661]: I0714 22:10:10.930196 1661 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 22:10:10.931522 kubelet[1661]: I0714 22:10:10.931498 1661 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 14 22:10:10.931636 kubelet[1661]: W0714 22:10:10.931619 1661 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 14 22:10:10.932525 kubelet[1661]: I0714 22:10:10.932506 1661 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 14 22:10:10.932590 kubelet[1661]: I0714 22:10:10.932541 1661 server.go:1287] "Started kubelet" Jul 14 22:10:10.932707 kubelet[1661]: I0714 22:10:10.932662 1661 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 22:10:10.933550 kubelet[1661]: I0714 22:10:10.933531 1661 server.go:479] "Adding debug handlers to kubelet server" Jul 14 22:10:10.934000 audit[1661]: AVC avc: denied { mac_admin } for pid=1661 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.934000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:10:10.934000 audit[1661]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b058c0 a1=400090b5a8 a2=4000b05890 a3=25 items=0 ppid=1 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.934000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:10:10.935936 kubelet[1661]: I0714 22:10:10.935909 1661 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 22:10:10.934000 audit[1661]: AVC avc: denied { mac_admin } for pid=1661 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:10.934000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:10:10.934000 audit[1661]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009150a0 a1=400090b5c0 a2=4000b05950 a3=25 items=0 ppid=1 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.934000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:10:10.936180 kubelet[1661]: I0714 22:10:10.936165 1661 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 14 22:10:10.936307 kubelet[1661]: I0714 22:10:10.936294 1661 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 22:10:10.937820 kubelet[1661]: I0714 22:10:10.937749 1661 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 22:10:10.937997 kubelet[1661]: I0714 22:10:10.937968 1661 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 22:10:10.938207 kubelet[1661]: I0714 22:10:10.938170 1661 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 22:10:10.939817 kubelet[1661]: E0714 22:10:10.939694 1661 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:10:10.939817 kubelet[1661]: I0714 22:10:10.939734 1661 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 14 22:10:10.940613 kubelet[1661]: I0714 22:10:10.940533 1661 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 14 22:10:10.940613 kubelet[1661]: I0714 22:10:10.940610 1661 reconciler.go:26] "Reconciler: start to sync state" Jul 14 22:10:10.942053 kubelet[1661]: W0714 22:10:10.941926 1661 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.118:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.118:6443: connect: connection refused Jul 14 22:10:10.942053 kubelet[1661]: E0714 22:10:10.941970 1661 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.118:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.118:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:10:10.942976 kubelet[1661]: E0714 22:10:10.942627 1661 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.118:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.118:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18523dab4c7d39f7 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-14 22:10:10.932521463 +0000 UTC m=+0.663711737,LastTimestamp:2025-07-14 22:10:10.932521463 +0000 UTC m=+0.663711737,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 14 22:10:10.943146 kubelet[1661]: I0714 22:10:10.943107 1661 factory.go:221] Registration of the systemd container factory successfully Jul 14 22:10:10.943225 kubelet[1661]: I0714 22:10:10.943204 1661 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 22:10:10.941000 audit[1674]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1674 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:10.941000 audit[1674]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd79043a0 a2=0 a3=1 items=0 ppid=1661 pid=1674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.941000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 22:10:10.943982 kubelet[1661]: I0714 22:10:10.943956 1661 factory.go:221] Registration of the containerd container factory successfully Jul 14 22:10:10.944207 kubelet[1661]: E0714 22:10:10.944151 1661 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.118:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.118:6443: connect: connection refused" interval="200ms" Jul 14 22:10:10.944257 kubelet[1661]: E0714 22:10:10.944218 1661 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 14 22:10:10.943000 audit[1675]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:10.943000 audit[1675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdf142010 a2=0 a3=1 items=0 ppid=1661 pid=1675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.943000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 22:10:10.945000 audit[1677]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:10.945000 audit[1677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff6179e50 a2=0 a3=1 items=0 ppid=1661 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.945000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 22:10:10.947000 audit[1679]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:10.947000 audit[1679]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffdad0da30 a2=0 a3=1 items=0 ppid=1661 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.947000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 22:10:10.953000 audit[1684]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:10.953000 audit[1684]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffed70ecc0 a2=0 a3=1 items=0 ppid=1661 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.953000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 14 22:10:10.955280 kubelet[1661]: I0714 22:10:10.955249 1661 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 14 22:10:10.955000 audit[1686]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:10.955000 audit[1686]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffde74f220 a2=0 a3=1 items=0 ppid=1661 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.955000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 22:10:10.955000 audit[1687]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1687 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:10.955000 audit[1687]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffef420b40 a2=0 a3=1 items=0 ppid=1661 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.955000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 22:10:10.955000 audit[1688]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:10.955000 audit[1688]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffe0b6ec0 a2=0 a3=1 items=0 ppid=1661 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.955000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 22:10:10.957324 kubelet[1661]: I0714 22:10:10.957307 1661 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 14 22:10:10.957405 kubelet[1661]: I0714 22:10:10.957394 1661 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 14 22:10:10.957482 kubelet[1661]: I0714 22:10:10.957470 1661 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 14 22:10:10.957546 kubelet[1661]: I0714 22:10:10.957537 1661 kubelet.go:2382] "Starting kubelet main sync loop" Jul 14 22:10:10.957637 kubelet[1661]: E0714 22:10:10.957620 1661 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 22:10:10.956000 audit[1689]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:10.956000 audit[1689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeef2a640 a2=0 a3=1 items=0 ppid=1661 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.956000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 22:10:10.957000 audit[1690]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1690 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:10.957000 audit[1690]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcc2eae20 a2=0 a3=1 items=0 ppid=1661 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.957000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 22:10:10.958753 kubelet[1661]: W0714 22:10:10.958725 1661 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.118:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.118:6443: connect: connection refused Jul 14 22:10:10.958805 kubelet[1661]: E0714 22:10:10.958761 1661 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.118:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.118:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:10:10.959070 kubelet[1661]: I0714 22:10:10.959052 1661 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 14 22:10:10.959070 kubelet[1661]: I0714 22:10:10.959065 1661 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 14 22:10:10.959149 kubelet[1661]: I0714 22:10:10.959081 1661 state_mem.go:36] "Initialized new in-memory state store" Jul 14 22:10:10.958000 audit[1691]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1691 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:10.958000 audit[1691]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffdc557340 a2=0 a3=1 items=0 ppid=1661 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.958000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 22:10:10.959000 audit[1694]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1694 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:10.959000 audit[1694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcc62da50 a2=0 a3=1 items=0 ppid=1661 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:10.959000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 22:10:11.029639 kubelet[1661]: I0714 22:10:11.029599 1661 policy_none.go:49] "None policy: Start" Jul 14 22:10:11.029639 kubelet[1661]: I0714 22:10:11.029632 1661 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 14 22:10:11.029639 kubelet[1661]: I0714 22:10:11.029646 1661 state_mem.go:35] "Initializing new in-memory state store" Jul 14 22:10:11.034868 systemd[1]: Created slice kubepods.slice. Jul 14 22:10:11.038889 systemd[1]: Created slice kubepods-burstable.slice. Jul 14 22:10:11.039810 kubelet[1661]: E0714 22:10:11.039772 1661 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:10:11.041664 systemd[1]: Created slice kubepods-besteffort.slice. Jul 14 22:10:11.053000 audit[1661]: AVC avc: denied { mac_admin } for pid=1661 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:11.053000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:10:11.053000 audit[1661]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f80420 a1=4000f980c0 a2=4000f803f0 a3=25 items=0 ppid=1 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:11.053000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:10:11.055455 kubelet[1661]: I0714 22:10:11.055193 1661 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 14 22:10:11.055455 kubelet[1661]: I0714 22:10:11.055248 1661 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 14 22:10:11.055455 kubelet[1661]: I0714 22:10:11.055352 1661 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 22:10:11.055455 kubelet[1661]: I0714 22:10:11.055363 1661 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 22:10:11.056235 kubelet[1661]: I0714 22:10:11.056220 1661 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 22:10:11.056892 kubelet[1661]: E0714 22:10:11.056876 1661 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 14 22:10:11.057021 kubelet[1661]: E0714 22:10:11.057008 1661 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 14 22:10:11.066846 systemd[1]: Created slice kubepods-burstable-pod2db7e50864dd07f8035cf3420713e46b.slice. Jul 14 22:10:11.085092 kubelet[1661]: E0714 22:10:11.085061 1661 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:10:11.086703 systemd[1]: Created slice kubepods-burstable-pod5386fe11ed933ab82453de11903c7f47.slice. Jul 14 22:10:11.088625 kubelet[1661]: E0714 22:10:11.088607 1661 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:10:11.097625 systemd[1]: Created slice kubepods-burstable-pod2980a8ab51edc665be10a02e33130e15.slice. Jul 14 22:10:11.098981 kubelet[1661]: E0714 22:10:11.098959 1661 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:10:11.142398 kubelet[1661]: I0714 22:10:11.142308 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5386fe11ed933ab82453de11903c7f47-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"5386fe11ed933ab82453de11903c7f47\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:11.142529 kubelet[1661]: I0714 22:10:11.142505 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2980a8ab51edc665be10a02e33130e15-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"2980a8ab51edc665be10a02e33130e15\") " pod="kube-system/kube-scheduler-localhost" Jul 14 22:10:11.142625 kubelet[1661]: I0714 22:10:11.142612 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2db7e50864dd07f8035cf3420713e46b-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"2db7e50864dd07f8035cf3420713e46b\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:10:11.142708 kubelet[1661]: I0714 22:10:11.142693 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2db7e50864dd07f8035cf3420713e46b-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"2db7e50864dd07f8035cf3420713e46b\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:10:11.142786 kubelet[1661]: I0714 22:10:11.142774 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/5386fe11ed933ab82453de11903c7f47-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"5386fe11ed933ab82453de11903c7f47\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:11.142857 kubelet[1661]: I0714 22:10:11.142845 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5386fe11ed933ab82453de11903c7f47-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"5386fe11ed933ab82453de11903c7f47\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:11.142928 kubelet[1661]: I0714 22:10:11.142917 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5386fe11ed933ab82453de11903c7f47-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"5386fe11ed933ab82453de11903c7f47\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:11.143005 kubelet[1661]: I0714 22:10:11.142995 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2db7e50864dd07f8035cf3420713e46b-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"2db7e50864dd07f8035cf3420713e46b\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:10:11.143078 kubelet[1661]: I0714 22:10:11.143067 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5386fe11ed933ab82453de11903c7f47-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"5386fe11ed933ab82453de11903c7f47\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:11.144745 kubelet[1661]: E0714 22:10:11.144718 1661 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.118:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.118:6443: connect: connection refused" interval="400ms" Jul 14 22:10:11.156888 kubelet[1661]: I0714 22:10:11.156866 1661 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:10:11.157321 kubelet[1661]: E0714 22:10:11.157297 1661 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.118:6443/api/v1/nodes\": dial tcp 10.0.0.118:6443: connect: connection refused" node="localhost" Jul 14 22:10:11.359483 kubelet[1661]: I0714 22:10:11.359453 1661 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:10:11.359808 kubelet[1661]: E0714 22:10:11.359782 1661 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.118:6443/api/v1/nodes\": dial tcp 10.0.0.118:6443: connect: connection refused" node="localhost" Jul 14 22:10:11.386080 kubelet[1661]: E0714 22:10:11.386056 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:11.386660 env[1215]: time="2025-07-14T22:10:11.386626349Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:2db7e50864dd07f8035cf3420713e46b,Namespace:kube-system,Attempt:0,}" Jul 14 22:10:11.390045 kubelet[1661]: E0714 22:10:11.389889 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:11.390246 env[1215]: time="2025-07-14T22:10:11.390218223Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:5386fe11ed933ab82453de11903c7f47,Namespace:kube-system,Attempt:0,}" Jul 14 22:10:11.399836 kubelet[1661]: E0714 22:10:11.399765 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:11.400594 env[1215]: time="2025-07-14T22:10:11.400162326Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:2980a8ab51edc665be10a02e33130e15,Namespace:kube-system,Attempt:0,}" Jul 14 22:10:11.545299 kubelet[1661]: E0714 22:10:11.545240 1661 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.118:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.118:6443: connect: connection refused" interval="800ms" Jul 14 22:10:11.761495 kubelet[1661]: I0714 22:10:11.761058 1661 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:10:11.761736 kubelet[1661]: E0714 22:10:11.761706 1661 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.118:6443/api/v1/nodes\": dial tcp 10.0.0.118:6443: connect: connection refused" node="localhost" Jul 14 22:10:11.791083 kubelet[1661]: W0714 22:10:11.791026 1661 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.118:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.118:6443: connect: connection refused Jul 14 22:10:11.791205 kubelet[1661]: E0714 22:10:11.791092 1661 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.118:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.118:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:10:11.920474 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2173183029.mount: Deactivated successfully. Jul 14 22:10:11.924004 env[1215]: time="2025-07-14T22:10:11.923955660Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:11.926486 env[1215]: time="2025-07-14T22:10:11.926452616Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:11.927967 env[1215]: time="2025-07-14T22:10:11.927939934Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:11.928953 env[1215]: time="2025-07-14T22:10:11.928915292Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:11.929813 env[1215]: time="2025-07-14T22:10:11.929757650Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:11.931853 env[1215]: time="2025-07-14T22:10:11.931828047Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:11.934237 env[1215]: time="2025-07-14T22:10:11.934207003Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:11.936557 env[1215]: time="2025-07-14T22:10:11.936494959Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:11.937929 env[1215]: time="2025-07-14T22:10:11.937904116Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:11.939719 env[1215]: time="2025-07-14T22:10:11.939693993Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:11.940445 env[1215]: time="2025-07-14T22:10:11.940417552Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:11.942200 env[1215]: time="2025-07-14T22:10:11.942173549Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:11.970161 env[1215]: time="2025-07-14T22:10:11.969992261Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:10:11.970161 env[1215]: time="2025-07-14T22:10:11.970029501Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:10:11.970161 env[1215]: time="2025-07-14T22:10:11.970040501Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:10:11.970372 env[1215]: time="2025-07-14T22:10:11.969865181Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:10:11.970372 env[1215]: time="2025-07-14T22:10:11.969909141Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:10:11.970372 env[1215]: time="2025-07-14T22:10:11.969919261Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:10:11.970372 env[1215]: time="2025-07-14T22:10:11.970103781Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/47f95a76b05b61bd9fa3c4c9576a2d99b4939990460cec6bf9eb94513beaf3f0 pid=1718 runtime=io.containerd.runc.v2 Jul 14 22:10:11.970635 env[1215]: time="2025-07-14T22:10:11.970584940Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/15ef7a058a6779edab95ada7fcae3e4c348b043cfbef0557523075287216a802 pid=1712 runtime=io.containerd.runc.v2 Jul 14 22:10:11.971004 env[1215]: time="2025-07-14T22:10:11.970957219Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:10:11.971074 env[1215]: time="2025-07-14T22:10:11.970997379Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:10:11.971074 env[1215]: time="2025-07-14T22:10:11.971010019Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:10:11.971340 env[1215]: time="2025-07-14T22:10:11.971292699Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1e837247bad5216b443860c329617acf8c2c682abf61fe04555b937d732caa98 pid=1717 runtime=io.containerd.runc.v2 Jul 14 22:10:11.974163 kubelet[1661]: W0714 22:10:11.974064 1661 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.118:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.118:6443: connect: connection refused Jul 14 22:10:11.974163 kubelet[1661]: E0714 22:10:11.974128 1661 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.118:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.118:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:10:11.985758 systemd[1]: Started cri-containerd-47f95a76b05b61bd9fa3c4c9576a2d99b4939990460cec6bf9eb94513beaf3f0.scope. Jul 14 22:10:11.988946 systemd[1]: Started cri-containerd-15ef7a058a6779edab95ada7fcae3e4c348b043cfbef0557523075287216a802.scope. Jul 14 22:10:12.002971 kubelet[1661]: W0714 22:10:12.002195 1661 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.118:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.118:6443: connect: connection refused Jul 14 22:10:12.002971 kubelet[1661]: E0714 22:10:12.002260 1661 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.118:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.118:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:10:12.006721 systemd[1]: Started cri-containerd-1e837247bad5216b443860c329617acf8c2c682abf61fe04555b937d732caa98.scope. Jul 14 22:10:12.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.034000 audit: BPF prog-id=55 op=LOAD Jul 14 22:10:12.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.035000 audit: BPF prog-id=56 op=LOAD Jul 14 22:10:12.036000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.036000 audit[1745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1718 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437663935613736623035623631626439666133633463393537366132 Jul 14 22:10:12.036000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.036000 audit[1745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1718 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437663935613736623035623631626439666133633463393537366132 Jul 14 22:10:12.036000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.036000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.036000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.036000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.036000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.036000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.036000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.036000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.036000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1712 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135656637613035386136373739656461623935616461376663616533 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1712 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135656637613035386136373739656461623935616461376663616533 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit: BPF prog-id=57 op=LOAD Jul 14 22:10:12.037000 audit[1752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1712 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135656637613035386136373739656461623935616461376663616533 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit: BPF prog-id=58 op=LOAD Jul 14 22:10:12.037000 audit[1752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1712 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135656637613035386136373739656461623935616461376663616533 Jul 14 22:10:12.037000 audit: BPF prog-id=58 op=UNLOAD Jul 14 22:10:12.037000 audit: BPF prog-id=57 op=UNLOAD Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.037000 audit: BPF prog-id=59 op=LOAD Jul 14 22:10:12.037000 audit[1752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1712 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135656637613035386136373739656461623935616461376663616533 Jul 14 22:10:12.036000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.036000 audit: BPF prog-id=60 op=LOAD Jul 14 22:10:12.036000 audit[1745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1718 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437663935613736623035623631626439666133633463393537366132 Jul 14 22:10:12.038000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.038000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.038000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.038000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.038000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.038000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.038000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.038000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.038000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.038000 audit: BPF prog-id=61 op=LOAD Jul 14 22:10:12.038000 audit[1745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1718 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437663935613736623035623631626439666133633463393537366132 Jul 14 22:10:12.039000 audit: BPF prog-id=61 op=UNLOAD Jul 14 22:10:12.039000 audit: BPF prog-id=60 op=UNLOAD Jul 14 22:10:12.039000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.039000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.039000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.039000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.039000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.039000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.039000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.039000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.039000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.039000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.039000 audit: BPF prog-id=62 op=LOAD Jul 14 22:10:12.039000 audit[1745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1718 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437663935613736623035623631626439666133633463393537366132 Jul 14 22:10:12.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.044000 audit: BPF prog-id=63 op=LOAD Jul 14 22:10:12.044000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.044000 audit[1749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1717 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165383337323437626164353231366234343338363063333239363137 Jul 14 22:10:12.044000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.044000 audit[1749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1717 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165383337323437626164353231366234343338363063333239363137 Jul 14 22:10:12.047118 kubelet[1661]: W0714 22:10:12.047029 1661 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.118:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.118:6443: connect: connection refused Jul 14 22:10:12.047118 kubelet[1661]: E0714 22:10:12.047098 1661 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.118:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.118:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:10:12.045000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.045000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.045000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.045000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.045000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.045000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.045000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.045000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.045000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.045000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.045000 audit: BPF prog-id=64 op=LOAD Jul 14 22:10:12.045000 audit[1749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1717 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165383337323437626164353231366234343338363063333239363137 Jul 14 22:10:12.046000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.046000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.046000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.046000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.046000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.046000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.046000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.046000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.046000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.046000 audit: BPF prog-id=65 op=LOAD Jul 14 22:10:12.046000 audit[1749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1717 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165383337323437626164353231366234343338363063333239363137 Jul 14 22:10:12.047000 audit: BPF prog-id=65 op=UNLOAD Jul 14 22:10:12.047000 audit: BPF prog-id=64 op=UNLOAD Jul 14 22:10:12.047000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.047000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.047000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.047000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.047000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.047000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.047000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.047000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.047000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.047000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.047000 audit: BPF prog-id=66 op=LOAD Jul 14 22:10:12.047000 audit[1749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1717 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165383337323437626164353231366234343338363063333239363137 Jul 14 22:10:12.061610 env[1215]: time="2025-07-14T22:10:12.061523149Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:5386fe11ed933ab82453de11903c7f47,Namespace:kube-system,Attempt:0,} returns sandbox id \"15ef7a058a6779edab95ada7fcae3e4c348b043cfbef0557523075287216a802\"" Jul 14 22:10:12.062283 kubelet[1661]: E0714 22:10:12.062257 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:12.064736 env[1215]: time="2025-07-14T22:10:12.064660384Z" level=info msg="CreateContainer within sandbox \"15ef7a058a6779edab95ada7fcae3e4c348b043cfbef0557523075287216a802\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 14 22:10:12.076481 env[1215]: time="2025-07-14T22:10:12.075575086Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:2980a8ab51edc665be10a02e33130e15,Namespace:kube-system,Attempt:0,} returns sandbox id \"47f95a76b05b61bd9fa3c4c9576a2d99b4939990460cec6bf9eb94513beaf3f0\"" Jul 14 22:10:12.076598 kubelet[1661]: E0714 22:10:12.076293 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:12.077756 env[1215]: time="2025-07-14T22:10:12.077712243Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:2db7e50864dd07f8035cf3420713e46b,Namespace:kube-system,Attempt:0,} returns sandbox id \"1e837247bad5216b443860c329617acf8c2c682abf61fe04555b937d732caa98\"" Jul 14 22:10:12.078032 env[1215]: time="2025-07-14T22:10:12.078003682Z" level=info msg="CreateContainer within sandbox \"47f95a76b05b61bd9fa3c4c9576a2d99b4939990460cec6bf9eb94513beaf3f0\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 14 22:10:12.078164 kubelet[1661]: E0714 22:10:12.078146 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:12.078445 env[1215]: time="2025-07-14T22:10:12.078368162Z" level=info msg="CreateContainer within sandbox \"15ef7a058a6779edab95ada7fcae3e4c348b043cfbef0557523075287216a802\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"2131a9ad48a1c87d5fea0d5838b212bfb84a92603e46f8811eca090bb24b8c43\"" Jul 14 22:10:12.079092 env[1215]: time="2025-07-14T22:10:12.079047441Z" level=info msg="StartContainer for \"2131a9ad48a1c87d5fea0d5838b212bfb84a92603e46f8811eca090bb24b8c43\"" Jul 14 22:10:12.079341 env[1215]: time="2025-07-14T22:10:12.079306960Z" level=info msg="CreateContainer within sandbox \"1e837247bad5216b443860c329617acf8c2c682abf61fe04555b937d732caa98\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 14 22:10:12.091036 env[1215]: time="2025-07-14T22:10:12.090985101Z" level=info msg="CreateContainer within sandbox \"47f95a76b05b61bd9fa3c4c9576a2d99b4939990460cec6bf9eb94513beaf3f0\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"b7f57d53aac20c013157567f5e63e1e336af12796e6776a4c1d59cbd16471022\"" Jul 14 22:10:12.091581 env[1215]: time="2025-07-14T22:10:12.091548380Z" level=info msg="StartContainer for \"b7f57d53aac20c013157567f5e63e1e336af12796e6776a4c1d59cbd16471022\"" Jul 14 22:10:12.095393 env[1215]: time="2025-07-14T22:10:12.095337174Z" level=info msg="CreateContainer within sandbox \"1e837247bad5216b443860c329617acf8c2c682abf61fe04555b937d732caa98\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"e0bc244906700492faac0b1ae0ad73ea954f6a27ce09b606a47585b7b8b21800\"" Jul 14 22:10:12.096031 env[1215]: time="2025-07-14T22:10:12.095998013Z" level=info msg="StartContainer for \"e0bc244906700492faac0b1ae0ad73ea954f6a27ce09b606a47585b7b8b21800\"" Jul 14 22:10:12.096778 systemd[1]: Started cri-containerd-2131a9ad48a1c87d5fea0d5838b212bfb84a92603e46f8811eca090bb24b8c43.scope. Jul 14 22:10:12.115831 systemd[1]: Started cri-containerd-b7f57d53aac20c013157567f5e63e1e336af12796e6776a4c1d59cbd16471022.scope. Jul 14 22:10:12.125334 systemd[1]: Started cri-containerd-e0bc244906700492faac0b1ae0ad73ea954f6a27ce09b606a47585b7b8b21800.scope. Jul 14 22:10:12.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.135000 audit: BPF prog-id=67 op=LOAD Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1712 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333161396164343861316338376435666561306435383338623231 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1712 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333161396164343861316338376435666561306435383338623231 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit: BPF prog-id=68 op=LOAD Jul 14 22:10:12.136000 audit[1829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1712 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333161396164343861316338376435666561306435383338623231 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit: BPF prog-id=69 op=LOAD Jul 14 22:10:12.136000 audit[1829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1712 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333161396164343861316338376435666561306435383338623231 Jul 14 22:10:12.136000 audit: BPF prog-id=69 op=UNLOAD Jul 14 22:10:12.136000 audit: BPF prog-id=68 op=UNLOAD Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.136000 audit: BPF prog-id=70 op=LOAD Jul 14 22:10:12.136000 audit[1829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1712 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333161396164343861316338376435666561306435383338623231 Jul 14 22:10:12.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.148000 audit: BPF prog-id=71 op=LOAD Jul 14 22:10:12.148000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.148000 audit[1852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1717 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530626332343439303637303034393266616163306231616530616437 Jul 14 22:10:12.148000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.148000 audit[1852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1717 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530626332343439303637303034393266616163306231616530616437 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit: BPF prog-id=72 op=LOAD Jul 14 22:10:12.150000 audit[1852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1717 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530626332343439303637303034393266616163306231616530616437 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit: BPF prog-id=73 op=LOAD Jul 14 22:10:12.150000 audit[1852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1717 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530626332343439303637303034393266616163306231616530616437 Jul 14 22:10:12.150000 audit: BPF prog-id=73 op=UNLOAD Jul 14 22:10:12.150000 audit: BPF prog-id=72 op=UNLOAD Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.150000 audit: BPF prog-id=74 op=LOAD Jul 14 22:10:12.150000 audit[1852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1717 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530626332343439303637303034393266616163306231616530616437 Jul 14 22:10:12.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit: BPF prog-id=75 op=LOAD Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1718 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237663537643533616163323063303133313537353637663565363365 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1718 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237663537643533616163323063303133313537353637663565363365 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit: BPF prog-id=76 op=LOAD Jul 14 22:10:12.152000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1718 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237663537643533616163323063303133313537353637663565363365 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.152000 audit: BPF prog-id=77 op=LOAD Jul 14 22:10:12.152000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1718 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237663537643533616163323063303133313537353637663565363365 Jul 14 22:10:12.152000 audit: BPF prog-id=77 op=UNLOAD Jul 14 22:10:12.152000 audit: BPF prog-id=76 op=UNLOAD Jul 14 22:10:12.153000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.153000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.153000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.153000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.153000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.153000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.153000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.153000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.153000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.153000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:12.153000 audit: BPF prog-id=78 op=LOAD Jul 14 22:10:12.153000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1718 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:12.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237663537643533616163323063303133313537353637663565363365 Jul 14 22:10:12.169868 env[1215]: time="2025-07-14T22:10:12.168704975Z" level=info msg="StartContainer for \"2131a9ad48a1c87d5fea0d5838b212bfb84a92603e46f8811eca090bb24b8c43\" returns successfully" Jul 14 22:10:12.181846 env[1215]: time="2025-07-14T22:10:12.181793874Z" level=info msg="StartContainer for \"e0bc244906700492faac0b1ae0ad73ea954f6a27ce09b606a47585b7b8b21800\" returns successfully" Jul 14 22:10:12.203099 env[1215]: time="2025-07-14T22:10:12.198285447Z" level=info msg="StartContainer for \"b7f57d53aac20c013157567f5e63e1e336af12796e6776a4c1d59cbd16471022\" returns successfully" Jul 14 22:10:12.346137 kubelet[1661]: E0714 22:10:12.346069 1661 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.118:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.118:6443: connect: connection refused" interval="1.6s" Jul 14 22:10:12.563992 kubelet[1661]: I0714 22:10:12.563690 1661 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:10:12.968812 kubelet[1661]: E0714 22:10:12.968775 1661 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:10:12.968938 kubelet[1661]: E0714 22:10:12.968897 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:12.970639 kubelet[1661]: E0714 22:10:12.970611 1661 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:10:12.970728 kubelet[1661]: E0714 22:10:12.970711 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:12.972511 kubelet[1661]: E0714 22:10:12.972484 1661 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:10:12.972607 kubelet[1661]: E0714 22:10:12.972589 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:13.467807 kernel: kauditd_printk_skb: 561 callbacks suppressed Jul 14 22:10:13.467920 kernel: audit: type=1400 audit(1752531013.462:556): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:13.462000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:13.462000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40004ec1a0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:10:13.472353 kernel: audit: type=1300 audit(1752531013.462:556): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40004ec1a0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:10:13.462000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:10:13.476007 kernel: audit: type=1327 audit(1752531013.462:556): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:10:13.462000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:13.479407 kernel: audit: type=1400 audit(1752531013.462:557): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:13.462000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000e28000 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:10:13.483650 kernel: audit: type=1300 audit(1752531013.462:557): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000e28000 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:10:13.462000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:10:13.487171 kernel: audit: type=1327 audit(1752531013.462:557): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:10:13.596000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:13.596000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4003bd69f0 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:10:13.605011 kernel: audit: type=1400 audit(1752531013.596:558): avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:13.605085 kernel: audit: type=1300 audit(1752531013.596:558): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4003bd69f0 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:10:13.605109 kernel: audit: type=1327 audit(1752531013.596:558): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:10:13.596000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:10:13.597000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:13.611925 kernel: audit: type=1400 audit(1752531013.597:559): avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:13.597000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4003bd6ab0 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:10:13.597000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:10:13.604000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:13.604000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004a97200 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:10:13.604000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:10:13.607000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:13.607000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=49 a1=4007b78020 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:10:13.607000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:10:13.609000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:13.609000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40029a2760 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:10:13.609000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:10:13.609000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:13.609000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4004a97680 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:10:13.609000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:10:13.744351 kubelet[1661]: I0714 22:10:13.744218 1661 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 14 22:10:13.744351 kubelet[1661]: E0714 22:10:13.744263 1661 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 14 22:10:13.757235 kubelet[1661]: E0714 22:10:13.757199 1661 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:10:13.792671 kubelet[1661]: E0714 22:10:13.792566 1661 event.go:359] "Server rejected event (will not retry!)" err="namespaces \"default\" not found" event="&Event{ObjectMeta:{localhost.18523dab4c7d39f7 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-14 22:10:10.932521463 +0000 UTC m=+0.663711737,LastTimestamp:2025-07-14 22:10:10.932521463 +0000 UTC m=+0.663711737,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 14 22:10:13.858476 kubelet[1661]: E0714 22:10:13.858440 1661 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:10:13.959433 kubelet[1661]: E0714 22:10:13.959386 1661 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:10:13.974147 kubelet[1661]: E0714 22:10:13.974122 1661 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:10:13.974270 kubelet[1661]: E0714 22:10:13.974254 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:13.974504 kubelet[1661]: E0714 22:10:13.974485 1661 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:10:13.974590 kubelet[1661]: E0714 22:10:13.974574 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:14.044293 kubelet[1661]: I0714 22:10:14.044190 1661 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 22:10:14.052544 kubelet[1661]: E0714 22:10:14.052494 1661 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 14 22:10:14.052544 kubelet[1661]: I0714 22:10:14.052524 1661 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 22:10:14.054358 kubelet[1661]: E0714 22:10:14.054317 1661 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 14 22:10:14.054358 kubelet[1661]: I0714 22:10:14.054353 1661 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:14.055859 kubelet[1661]: E0714 22:10:14.055829 1661 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:14.926388 kubelet[1661]: I0714 22:10:14.926338 1661 apiserver.go:52] "Watching apiserver" Jul 14 22:10:14.945036 kubelet[1661]: I0714 22:10:14.944980 1661 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 14 22:10:15.698687 kubelet[1661]: I0714 22:10:15.698632 1661 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 22:10:15.703854 kubelet[1661]: E0714 22:10:15.703821 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:15.735496 systemd[1]: Reloading. Jul 14 22:10:15.813951 /usr/lib/systemd/system-generators/torcx-generator[1957]: time="2025-07-14T22:10:15Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 22:10:15.813982 /usr/lib/systemd/system-generators/torcx-generator[1957]: time="2025-07-14T22:10:15Z" level=info msg="torcx already run" Jul 14 22:10:15.873355 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 22:10:15.873384 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 22:10:15.888974 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 22:10:15.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.956000 audit: BPF prog-id=79 op=LOAD Jul 14 22:10:15.956000 audit: BPF prog-id=40 op=UNLOAD Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit: BPF prog-id=80 op=LOAD Jul 14 22:10:15.957000 audit: BPF prog-id=41 op=UNLOAD Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit: BPF prog-id=81 op=LOAD Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.957000 audit: BPF prog-id=82 op=LOAD Jul 14 22:10:15.957000 audit: BPF prog-id=42 op=UNLOAD Jul 14 22:10:15.957000 audit: BPF prog-id=43 op=UNLOAD Jul 14 22:10:15.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.958000 audit: BPF prog-id=83 op=LOAD Jul 14 22:10:15.958000 audit: BPF prog-id=55 op=UNLOAD Jul 14 22:10:15.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit: BPF prog-id=84 op=LOAD Jul 14 22:10:15.959000 audit: BPF prog-id=44 op=UNLOAD Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit: BPF prog-id=85 op=LOAD Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit: BPF prog-id=86 op=LOAD Jul 14 22:10:15.959000 audit: BPF prog-id=45 op=UNLOAD Jul 14 22:10:15.959000 audit: BPF prog-id=46 op=UNLOAD Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit: BPF prog-id=87 op=LOAD Jul 14 22:10:15.960000 audit: BPF prog-id=47 op=UNLOAD Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit: BPF prog-id=88 op=LOAD Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit: BPF prog-id=89 op=LOAD Jul 14 22:10:15.960000 audit: BPF prog-id=48 op=UNLOAD Jul 14 22:10:15.960000 audit: BPF prog-id=49 op=UNLOAD Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.962000 audit: BPF prog-id=90 op=LOAD Jul 14 22:10:15.962000 audit: BPF prog-id=71 op=UNLOAD Jul 14 22:10:15.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.962000 audit: BPF prog-id=91 op=LOAD Jul 14 22:10:15.962000 audit: BPF prog-id=50 op=UNLOAD Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit: BPF prog-id=92 op=LOAD Jul 14 22:10:15.964000 audit: BPF prog-id=51 op=UNLOAD Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.965000 audit: BPF prog-id=93 op=LOAD Jul 14 22:10:15.965000 audit: BPF prog-id=67 op=UNLOAD Jul 14 22:10:15.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.966000 audit: BPF prog-id=94 op=LOAD Jul 14 22:10:15.966000 audit: BPF prog-id=63 op=UNLOAD Jul 14 22:10:15.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit: BPF prog-id=95 op=LOAD Jul 14 22:10:15.967000 audit: BPF prog-id=52 op=UNLOAD Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit: BPF prog-id=96 op=LOAD Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.967000 audit: BPF prog-id=97 op=LOAD Jul 14 22:10:15.967000 audit: BPF prog-id=53 op=UNLOAD Jul 14 22:10:15.967000 audit: BPF prog-id=54 op=UNLOAD Jul 14 22:10:15.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.969000 audit: BPF prog-id=98 op=LOAD Jul 14 22:10:15.969000 audit: BPF prog-id=56 op=UNLOAD Jul 14 22:10:15.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:15.970000 audit: BPF prog-id=99 op=LOAD Jul 14 22:10:15.970000 audit: BPF prog-id=75 op=UNLOAD Jul 14 22:10:15.977798 kubelet[1661]: E0714 22:10:15.977719 1661 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:15.982703 systemd[1]: Stopping kubelet.service... Jul 14 22:10:16.011847 systemd[1]: kubelet.service: Deactivated successfully. Jul 14 22:10:16.012213 systemd[1]: Stopped kubelet.service. Jul 14 22:10:16.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:16.012486 systemd[1]: kubelet.service: Consumed 1.043s CPU time. Jul 14 22:10:16.014981 systemd[1]: Starting kubelet.service... Jul 14 22:10:16.121589 systemd[1]: Started kubelet.service. Jul 14 22:10:16.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:16.164745 kubelet[1999]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 22:10:16.164745 kubelet[1999]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 14 22:10:16.164745 kubelet[1999]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 22:10:16.165559 kubelet[1999]: I0714 22:10:16.165519 1999 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 22:10:16.171878 kubelet[1999]: I0714 22:10:16.171843 1999 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 14 22:10:16.172018 kubelet[1999]: I0714 22:10:16.172004 1999 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 22:10:16.173196 kubelet[1999]: I0714 22:10:16.173166 1999 server.go:954] "Client rotation is on, will bootstrap in background" Jul 14 22:10:16.176738 kubelet[1999]: I0714 22:10:16.176714 1999 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 14 22:10:16.179238 kubelet[1999]: I0714 22:10:16.179218 1999 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 22:10:16.184555 kubelet[1999]: E0714 22:10:16.184522 1999 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 22:10:16.184555 kubelet[1999]: I0714 22:10:16.184552 1999 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 22:10:16.188081 kubelet[1999]: I0714 22:10:16.188047 1999 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 22:10:16.188332 kubelet[1999]: I0714 22:10:16.188297 1999 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 22:10:16.188607 kubelet[1999]: I0714 22:10:16.188332 1999 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 22:10:16.188698 kubelet[1999]: I0714 22:10:16.188613 1999 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 22:10:16.188698 kubelet[1999]: I0714 22:10:16.188624 1999 container_manager_linux.go:304] "Creating device plugin manager" Jul 14 22:10:16.188698 kubelet[1999]: I0714 22:10:16.188682 1999 state_mem.go:36] "Initialized new in-memory state store" Jul 14 22:10:16.188933 kubelet[1999]: I0714 22:10:16.188917 1999 kubelet.go:446] "Attempting to sync node with API server" Jul 14 22:10:16.188971 kubelet[1999]: I0714 22:10:16.188936 1999 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 22:10:16.188971 kubelet[1999]: I0714 22:10:16.188953 1999 kubelet.go:352] "Adding apiserver pod source" Jul 14 22:10:16.188971 kubelet[1999]: I0714 22:10:16.188964 1999 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 22:10:16.205716 kubelet[1999]: I0714 22:10:16.205675 1999 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 22:10:16.207230 kubelet[1999]: I0714 22:10:16.207190 1999 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 14 22:10:16.208008 kubelet[1999]: I0714 22:10:16.207980 1999 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 14 22:10:16.208101 kubelet[1999]: I0714 22:10:16.208026 1999 server.go:1287] "Started kubelet" Jul 14 22:10:16.208274 kubelet[1999]: I0714 22:10:16.208182 1999 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 22:10:16.209429 kubelet[1999]: I0714 22:10:16.209411 1999 server.go:479] "Adding debug handlers to kubelet server" Jul 14 22:10:16.208000 audit[1999]: AVC avc: denied { mac_admin } for pid=1999 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:16.208000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:10:16.208000 audit[1999]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000614d80 a1=40009d44e0 a2=4000614d50 a3=25 items=0 ppid=1 pid=1999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:16.208000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:10:16.208000 audit[1999]: AVC avc: denied { mac_admin } for pid=1999 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:16.208000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:10:16.208000 audit[1999]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000874500 a1=40009d44f8 a2=4000614e10 a3=25 items=0 ppid=1 pid=1999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:16.208000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:10:16.210264 kubelet[1999]: I0714 22:10:16.209886 1999 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 22:10:16.210264 kubelet[1999]: I0714 22:10:16.209926 1999 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 14 22:10:16.210264 kubelet[1999]: I0714 22:10:16.209960 1999 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 22:10:16.210264 kubelet[1999]: I0714 22:10:16.210211 1999 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 22:10:16.211534 kubelet[1999]: I0714 22:10:16.211440 1999 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 22:10:16.212538 kubelet[1999]: I0714 22:10:16.212502 1999 factory.go:221] Registration of the systemd container factory successfully Jul 14 22:10:16.212618 kubelet[1999]: I0714 22:10:16.212596 1999 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 22:10:16.212883 kubelet[1999]: I0714 22:10:16.212868 1999 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 22:10:16.213003 kubelet[1999]: I0714 22:10:16.211703 1999 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 14 22:10:16.213264 kubelet[1999]: I0714 22:10:16.213252 1999 reconciler.go:26] "Reconciler: start to sync state" Jul 14 22:10:16.213431 kubelet[1999]: I0714 22:10:16.211712 1999 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 14 22:10:16.217284 kubelet[1999]: E0714 22:10:16.217261 1999 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 14 22:10:16.217579 kubelet[1999]: I0714 22:10:16.217561 1999 factory.go:221] Registration of the containerd container factory successfully Jul 14 22:10:16.223200 kubelet[1999]: I0714 22:10:16.223161 1999 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 14 22:10:16.225309 kubelet[1999]: I0714 22:10:16.225188 1999 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 14 22:10:16.225309 kubelet[1999]: I0714 22:10:16.225248 1999 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 14 22:10:16.225309 kubelet[1999]: I0714 22:10:16.225269 1999 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 14 22:10:16.225309 kubelet[1999]: I0714 22:10:16.225275 1999 kubelet.go:2382] "Starting kubelet main sync loop" Jul 14 22:10:16.225489 kubelet[1999]: E0714 22:10:16.225321 1999 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 22:10:16.252582 kubelet[1999]: I0714 22:10:16.252557 1999 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 14 22:10:16.252738 kubelet[1999]: I0714 22:10:16.252722 1999 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 14 22:10:16.252803 kubelet[1999]: I0714 22:10:16.252795 1999 state_mem.go:36] "Initialized new in-memory state store" Jul 14 22:10:16.253098 kubelet[1999]: I0714 22:10:16.253079 1999 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 14 22:10:16.253182 kubelet[1999]: I0714 22:10:16.253157 1999 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 14 22:10:16.253237 kubelet[1999]: I0714 22:10:16.253229 1999 policy_none.go:49] "None policy: Start" Jul 14 22:10:16.253293 kubelet[1999]: I0714 22:10:16.253283 1999 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 14 22:10:16.253348 kubelet[1999]: I0714 22:10:16.253338 1999 state_mem.go:35] "Initializing new in-memory state store" Jul 14 22:10:16.253572 kubelet[1999]: I0714 22:10:16.253556 1999 state_mem.go:75] "Updated machine memory state" Jul 14 22:10:16.257527 kubelet[1999]: I0714 22:10:16.257501 1999 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 14 22:10:16.256000 audit[1999]: AVC avc: denied { mac_admin } for pid=1999 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:16.256000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:10:16.256000 audit[1999]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000db7650 a1=4000ced710 a2=4000db7620 a3=25 items=0 ppid=1 pid=1999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:16.256000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:10:16.257902 kubelet[1999]: I0714 22:10:16.257723 1999 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 14 22:10:16.257902 kubelet[1999]: I0714 22:10:16.257886 1999 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 22:10:16.257952 kubelet[1999]: I0714 22:10:16.257898 1999 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 22:10:16.259112 kubelet[1999]: I0714 22:10:16.258060 1999 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 22:10:16.260014 kubelet[1999]: E0714 22:10:16.259727 1999 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 14 22:10:16.325866 kubelet[1999]: I0714 22:10:16.325827 1999 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 22:10:16.325984 kubelet[1999]: I0714 22:10:16.325881 1999 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:16.325984 kubelet[1999]: I0714 22:10:16.325905 1999 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 22:10:16.332034 kubelet[1999]: E0714 22:10:16.332002 1999 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 14 22:10:16.364253 kubelet[1999]: I0714 22:10:16.364229 1999 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:10:16.373155 kubelet[1999]: I0714 22:10:16.373125 1999 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 14 22:10:16.373256 kubelet[1999]: I0714 22:10:16.373206 1999 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 14 22:10:16.414517 kubelet[1999]: I0714 22:10:16.414444 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5386fe11ed933ab82453de11903c7f47-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"5386fe11ed933ab82453de11903c7f47\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:16.414517 kubelet[1999]: I0714 22:10:16.414487 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2db7e50864dd07f8035cf3420713e46b-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"2db7e50864dd07f8035cf3420713e46b\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:10:16.414517 kubelet[1999]: I0714 22:10:16.414509 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2db7e50864dd07f8035cf3420713e46b-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"2db7e50864dd07f8035cf3420713e46b\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:10:16.414693 kubelet[1999]: I0714 22:10:16.414533 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5386fe11ed933ab82453de11903c7f47-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"5386fe11ed933ab82453de11903c7f47\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:16.414693 kubelet[1999]: I0714 22:10:16.414550 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/5386fe11ed933ab82453de11903c7f47-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"5386fe11ed933ab82453de11903c7f47\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:16.414693 kubelet[1999]: I0714 22:10:16.414585 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2db7e50864dd07f8035cf3420713e46b-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"2db7e50864dd07f8035cf3420713e46b\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:10:16.414693 kubelet[1999]: I0714 22:10:16.414624 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5386fe11ed933ab82453de11903c7f47-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"5386fe11ed933ab82453de11903c7f47\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:16.414693 kubelet[1999]: I0714 22:10:16.414643 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5386fe11ed933ab82453de11903c7f47-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"5386fe11ed933ab82453de11903c7f47\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:10:16.414828 kubelet[1999]: I0714 22:10:16.414661 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2980a8ab51edc665be10a02e33130e15-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"2980a8ab51edc665be10a02e33130e15\") " pod="kube-system/kube-scheduler-localhost" Jul 14 22:10:16.632164 kubelet[1999]: E0714 22:10:16.632119 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:16.632318 kubelet[1999]: E0714 22:10:16.632275 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:16.632600 kubelet[1999]: E0714 22:10:16.632572 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:17.190114 kubelet[1999]: I0714 22:10:17.190042 1999 apiserver.go:52] "Watching apiserver" Jul 14 22:10:17.214358 kubelet[1999]: I0714 22:10:17.214293 1999 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 14 22:10:17.234203 kubelet[1999]: E0714 22:10:17.234163 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:17.234315 kubelet[1999]: E0714 22:10:17.234267 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:17.234520 kubelet[1999]: I0714 22:10:17.234500 1999 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 22:10:17.239778 kubelet[1999]: E0714 22:10:17.239746 1999 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 14 22:10:17.239932 kubelet[1999]: E0714 22:10:17.239910 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:17.260642 kubelet[1999]: I0714 22:10:17.260588 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.260570831 podStartE2EDuration="1.260570831s" podCreationTimestamp="2025-07-14 22:10:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:10:17.254202758 +0000 UTC m=+1.128585488" watchObservedRunningTime="2025-07-14 22:10:17.260570831 +0000 UTC m=+1.134953561" Jul 14 22:10:17.268532 kubelet[1999]: I0714 22:10:17.268478 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.268464141 podStartE2EDuration="2.268464141s" podCreationTimestamp="2025-07-14 22:10:15 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:10:17.26131095 +0000 UTC m=+1.135693640" watchObservedRunningTime="2025-07-14 22:10:17.268464141 +0000 UTC m=+1.142846871" Jul 14 22:10:17.276078 kubelet[1999]: I0714 22:10:17.276020 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.2759997730000001 podStartE2EDuration="1.275999773s" podCreationTimestamp="2025-07-14 22:10:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:10:17.268550901 +0000 UTC m=+1.142933591" watchObservedRunningTime="2025-07-14 22:10:17.275999773 +0000 UTC m=+1.150382503" Jul 14 22:10:17.721000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7302 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 14 22:10:17.721000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40001cca40 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:10:17.721000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:10:18.235345 kubelet[1999]: E0714 22:10:18.235310 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:18.235662 kubelet[1999]: E0714 22:10:18.235459 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:18.235709 kubelet[1999]: E0714 22:10:18.235662 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:19.237546 kubelet[1999]: E0714 22:10:19.237518 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:20.522000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:20.527189 kernel: kauditd_printk_skb: 275 callbacks suppressed Jul 14 22:10:20.527274 kernel: audit: type=1400 audit(1752531020.522:814): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:20.527303 kernel: audit: type=1300 audit(1752531020.522:814): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400123a5e0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:10:20.522000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400123a5e0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:10:20.522000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:10:20.534862 kernel: audit: type=1327 audit(1752531020.522:814): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:10:20.534920 kernel: audit: type=1400 audit(1752531020.522:815): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:20.522000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:20.522000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400123a620 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:10:20.541688 kernel: audit: type=1300 audit(1752531020.522:815): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400123a620 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:10:20.541738 kernel: audit: type=1327 audit(1752531020.522:815): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:10:20.522000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:10:20.522000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:20.547930 kernel: audit: type=1400 audit(1752531020.522:816): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:20.547989 kernel: audit: type=1300 audit(1752531020.522:816): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400123a7e0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:10:20.522000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400123a7e0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:10:20.522000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:10:20.555045 kernel: audit: type=1327 audit(1752531020.522:816): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:10:20.555101 kernel: audit: type=1400 audit(1752531020.522:817): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:20.522000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:10:20.522000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400123a820 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:10:20.522000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:10:21.186444 kubelet[1999]: I0714 22:10:21.186395 1999 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 14 22:10:21.186786 env[1215]: time="2025-07-14T22:10:21.186735014Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 14 22:10:21.186978 kubelet[1999]: I0714 22:10:21.186952 1999 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 14 22:10:22.096608 systemd[1]: Created slice kubepods-besteffort-pod7a5d064c_6e7b_47d9_b7f8_608ea2a8ed23.slice. Jul 14 22:10:22.155839 kubelet[1999]: I0714 22:10:22.155794 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/7a5d064c-6e7b-47d9-b7f8-608ea2a8ed23-kube-proxy\") pod \"kube-proxy-fghk7\" (UID: \"7a5d064c-6e7b-47d9-b7f8-608ea2a8ed23\") " pod="kube-system/kube-proxy-fghk7" Jul 14 22:10:22.155839 kubelet[1999]: I0714 22:10:22.155844 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9d64n\" (UniqueName: \"kubernetes.io/projected/7a5d064c-6e7b-47d9-b7f8-608ea2a8ed23-kube-api-access-9d64n\") pod \"kube-proxy-fghk7\" (UID: \"7a5d064c-6e7b-47d9-b7f8-608ea2a8ed23\") " pod="kube-system/kube-proxy-fghk7" Jul 14 22:10:22.156017 kubelet[1999]: I0714 22:10:22.155864 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7a5d064c-6e7b-47d9-b7f8-608ea2a8ed23-xtables-lock\") pod \"kube-proxy-fghk7\" (UID: \"7a5d064c-6e7b-47d9-b7f8-608ea2a8ed23\") " pod="kube-system/kube-proxy-fghk7" Jul 14 22:10:22.156017 kubelet[1999]: I0714 22:10:22.155879 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7a5d064c-6e7b-47d9-b7f8-608ea2a8ed23-lib-modules\") pod \"kube-proxy-fghk7\" (UID: \"7a5d064c-6e7b-47d9-b7f8-608ea2a8ed23\") " pod="kube-system/kube-proxy-fghk7" Jul 14 22:10:22.264562 kubelet[1999]: I0714 22:10:22.264526 1999 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 14 22:10:22.408828 kubelet[1999]: E0714 22:10:22.408741 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:22.409304 env[1215]: time="2025-07-14T22:10:22.409262688Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-fghk7,Uid:7a5d064c-6e7b-47d9-b7f8-608ea2a8ed23,Namespace:kube-system,Attempt:0,}" Jul 14 22:10:22.424020 env[1215]: time="2025-07-14T22:10:22.423858516Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:10:22.424130 env[1215]: time="2025-07-14T22:10:22.424033956Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:10:22.424130 env[1215]: time="2025-07-14T22:10:22.424059476Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:10:22.424301 env[1215]: time="2025-07-14T22:10:22.424258556Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c6bf51862961e98219508286be2c5c05224e43cc09764618a702247b8aa00681 pid=2048 runtime=io.containerd.runc.v2 Jul 14 22:10:22.437169 systemd[1]: Started cri-containerd-c6bf51862961e98219508286be2c5c05224e43cc09764618a702247b8aa00681.scope. Jul 14 22:10:22.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.453000 audit: BPF prog-id=100 op=LOAD Jul 14 22:10:22.453000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.453000 audit[2058]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2048 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336626635313836323936316539383231393530383238366265326335 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2048 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336626635313836323936316539383231393530383238366265326335 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit: BPF prog-id=101 op=LOAD Jul 14 22:10:22.454000 audit[2058]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2048 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336626635313836323936316539383231393530383238366265326335 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.454000 audit: BPF prog-id=102 op=LOAD Jul 14 22:10:22.454000 audit[2058]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2048 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336626635313836323936316539383231393530383238366265326335 Jul 14 22:10:22.455000 audit: BPF prog-id=102 op=UNLOAD Jul 14 22:10:22.455000 audit: BPF prog-id=101 op=UNLOAD Jul 14 22:10:22.455000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.455000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.455000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.455000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.455000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.455000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.455000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.455000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.455000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.455000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.455000 audit: BPF prog-id=103 op=LOAD Jul 14 22:10:22.455000 audit[2058]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2048 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336626635313836323936316539383231393530383238366265326335 Jul 14 22:10:22.466924 env[1215]: time="2025-07-14T22:10:22.466876680Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-fghk7,Uid:7a5d064c-6e7b-47d9-b7f8-608ea2a8ed23,Namespace:kube-system,Attempt:0,} returns sandbox id \"c6bf51862961e98219508286be2c5c05224e43cc09764618a702247b8aa00681\"" Jul 14 22:10:22.467922 kubelet[1999]: E0714 22:10:22.467675 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:22.471163 env[1215]: time="2025-07-14T22:10:22.471119076Z" level=info msg="CreateContainer within sandbox \"c6bf51862961e98219508286be2c5c05224e43cc09764618a702247b8aa00681\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 14 22:10:22.485383 env[1215]: time="2025-07-14T22:10:22.485327904Z" level=info msg="CreateContainer within sandbox \"c6bf51862961e98219508286be2c5c05224e43cc09764618a702247b8aa00681\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"7fc569b97713aab5de8006aaa8912d4e9512385277f11376a3dfc992121ff664\"" Jul 14 22:10:22.486141 env[1215]: time="2025-07-14T22:10:22.486118023Z" level=info msg="StartContainer for \"7fc569b97713aab5de8006aaa8912d4e9512385277f11376a3dfc992121ff664\"" Jul 14 22:10:22.500893 systemd[1]: Started cri-containerd-7fc569b97713aab5de8006aaa8912d4e9512385277f11376a3dfc992121ff664.scope. Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=2048 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766633536396239373731336161623564653830303661616138393132 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit: BPF prog-id=104 op=LOAD Jul 14 22:10:22.526000 audit[2089]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=2048 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766633536396239373731336161623564653830303661616138393132 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit: BPF prog-id=105 op=LOAD Jul 14 22:10:22.526000 audit[2089]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=2048 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766633536396239373731336161623564653830303661616138393132 Jul 14 22:10:22.526000 audit: BPF prog-id=105 op=UNLOAD Jul 14 22:10:22.526000 audit: BPF prog-id=104 op=UNLOAD Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:22.526000 audit: BPF prog-id=106 op=LOAD Jul 14 22:10:22.526000 audit[2089]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=2048 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766633536396239373731336161623564653830303661616138393132 Jul 14 22:10:22.542406 env[1215]: time="2025-07-14T22:10:22.541501656Z" level=info msg="StartContainer for \"7fc569b97713aab5de8006aaa8912d4e9512385277f11376a3dfc992121ff664\" returns successfully" Jul 14 22:10:22.621472 kubelet[1999]: E0714 22:10:22.621140 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:22.726000 audit[2149]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.726000 audit[2149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc205af60 a2=0 a3=1 items=0 ppid=2099 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.726000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 22:10:22.727000 audit[2150]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.727000 audit[2150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffef14cdc0 a2=0 a3=1 items=0 ppid=2099 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.727000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 22:10:22.728000 audit[2151]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.728000 audit[2151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe320f870 a2=0 a3=1 items=0 ppid=2099 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.728000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 22:10:22.728000 audit[2153]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.728000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff7dd9130 a2=0 a3=1 items=0 ppid=2099 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.728000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 22:10:22.729000 audit[2154]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.729000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdb9262d0 a2=0 a3=1 items=0 ppid=2099 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.729000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 22:10:22.733000 audit[2155]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.733000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffb731750 a2=0 a3=1 items=0 ppid=2099 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.733000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 22:10:22.829000 audit[2156]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.829000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd00ae9b0 a2=0 a3=1 items=0 ppid=2099 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.829000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 22:10:22.831000 audit[2158]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.831000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc19efc70 a2=0 a3=1 items=0 ppid=2099 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.831000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 14 22:10:22.836000 audit[2161]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.836000 audit[2161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff9301ac0 a2=0 a3=1 items=0 ppid=2099 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.836000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 14 22:10:22.837000 audit[2162]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.837000 audit[2162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5ed1fd0 a2=0 a3=1 items=0 ppid=2099 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.837000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 22:10:22.839000 audit[2164]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.839000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc5be1840 a2=0 a3=1 items=0 ppid=2099 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.839000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 22:10:22.840000 audit[2165]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.840000 audit[2165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5497fd0 a2=0 a3=1 items=0 ppid=2099 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.840000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 22:10:22.843000 audit[2167]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.843000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe5ea5730 a2=0 a3=1 items=0 ppid=2099 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.843000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 22:10:22.846000 audit[2170]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.846000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcf6ace70 a2=0 a3=1 items=0 ppid=2099 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.846000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 14 22:10:22.847000 audit[2171]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.847000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd0fc3020 a2=0 a3=1 items=0 ppid=2099 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.847000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 22:10:22.849000 audit[2173]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.849000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff66a37e0 a2=0 a3=1 items=0 ppid=2099 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.849000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 22:10:22.850000 audit[2174]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.850000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcf3bbaf0 a2=0 a3=1 items=0 ppid=2099 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.850000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 22:10:22.852000 audit[2176]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.852000 audit[2176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd1246740 a2=0 a3=1 items=0 ppid=2099 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.852000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 22:10:22.855000 audit[2179]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.855000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc2c1d7b0 a2=0 a3=1 items=0 ppid=2099 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.855000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 22:10:22.858000 audit[2182]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.858000 audit[2182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcf2717a0 a2=0 a3=1 items=0 ppid=2099 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.858000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 22:10:22.859000 audit[2183]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.859000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc4cc6fa0 a2=0 a3=1 items=0 ppid=2099 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.859000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 22:10:22.861000 audit[2185]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.861000 audit[2185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffffe7159e0 a2=0 a3=1 items=0 ppid=2099 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.861000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 22:10:22.864000 audit[2188]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.864000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffea4d2930 a2=0 a3=1 items=0 ppid=2099 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.864000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 22:10:22.865000 audit[2189]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.865000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffcb76a10 a2=0 a3=1 items=0 ppid=2099 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.865000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 22:10:22.867000 audit[2191]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:10:22.867000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffdc47a770 a2=0 a3=1 items=0 ppid=2099 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.867000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 22:10:22.889000 audit[2197]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:22.889000 audit[2197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd35e80a0 a2=0 a3=1 items=0 ppid=2099 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.889000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:22.902000 audit[2197]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:22.902000 audit[2197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffd35e80a0 a2=0 a3=1 items=0 ppid=2099 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.902000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:22.904000 audit[2202]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.904000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffcf0c8380 a2=0 a3=1 items=0 ppid=2099 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.904000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 22:10:22.906000 audit[2204]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.906000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffdc3b4450 a2=0 a3=1 items=0 ppid=2099 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.906000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 14 22:10:22.909000 audit[2207]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2207 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.909000 audit[2207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc3a71fe0 a2=0 a3=1 items=0 ppid=2099 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.909000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 14 22:10:22.910000 audit[2208]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.910000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffccfb9610 a2=0 a3=1 items=0 ppid=2099 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.910000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 22:10:22.913000 audit[2210]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.913000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe994a1f0 a2=0 a3=1 items=0 ppid=2099 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.913000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 22:10:22.914000 audit[2211]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.914000 audit[2211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe868b790 a2=0 a3=1 items=0 ppid=2099 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.914000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 22:10:22.916000 audit[2213]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.916000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd78ce370 a2=0 a3=1 items=0 ppid=2099 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.916000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 14 22:10:22.919000 audit[2216]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.919000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffed3ad6f0 a2=0 a3=1 items=0 ppid=2099 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.919000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 22:10:22.920000 audit[2217]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.920000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdde94920 a2=0 a3=1 items=0 ppid=2099 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.920000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 22:10:22.922000 audit[2219]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.922000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdc9c17c0 a2=0 a3=1 items=0 ppid=2099 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.922000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 22:10:22.923000 audit[2220]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.923000 audit[2220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdae96ac0 a2=0 a3=1 items=0 ppid=2099 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.923000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 22:10:22.925000 audit[2222]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.925000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffccb1e430 a2=0 a3=1 items=0 ppid=2099 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.925000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 22:10:22.928000 audit[2225]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.928000 audit[2225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff73baf30 a2=0 a3=1 items=0 ppid=2099 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.928000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 22:10:22.931000 audit[2228]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.931000 audit[2228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffbc435d0 a2=0 a3=1 items=0 ppid=2099 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.931000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 14 22:10:22.932000 audit[2229]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.932000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffee7b4e0 a2=0 a3=1 items=0 ppid=2099 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.932000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 22:10:22.935000 audit[2231]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.935000 audit[2231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd8cd7150 a2=0 a3=1 items=0 ppid=2099 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.935000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 22:10:22.937000 audit[2234]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.937000 audit[2234]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff090e4c0 a2=0 a3=1 items=0 ppid=2099 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.937000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 22:10:22.938000 audit[2235]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.938000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8287b40 a2=0 a3=1 items=0 ppid=2099 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.938000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 22:10:22.941000 audit[2237]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.941000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe902ccd0 a2=0 a3=1 items=0 ppid=2099 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.941000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 22:10:22.942000 audit[2238]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.942000 audit[2238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc16f9860 a2=0 a3=1 items=0 ppid=2099 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.942000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 22:10:22.944000 audit[2240]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.944000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc7e4e390 a2=0 a3=1 items=0 ppid=2099 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.944000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 22:10:22.947000 audit[2243]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:10:22.947000 audit[2243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffeb680780 a2=0 a3=1 items=0 ppid=2099 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.947000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 22:10:22.950000 audit[2245]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 22:10:22.950000 audit[2245]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=fffffe701890 a2=0 a3=1 items=0 ppid=2099 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.950000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:22.950000 audit[2245]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 22:10:22.950000 audit[2245]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=fffffe701890 a2=0 a3=1 items=0 ppid=2099 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:22.950000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:23.245662 kubelet[1999]: E0714 22:10:23.245619 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:23.246137 kubelet[1999]: E0714 22:10:23.246109 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:23.259016 kubelet[1999]: I0714 22:10:23.258963 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-fghk7" podStartSLOduration=1.25894982 podStartE2EDuration="1.25894982s" podCreationTimestamp="2025-07-14 22:10:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:10:23.25834182 +0000 UTC m=+7.132724510" watchObservedRunningTime="2025-07-14 22:10:23.25894982 +0000 UTC m=+7.133332550" Jul 14 22:10:24.247239 kubelet[1999]: E0714 22:10:24.247206 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:27.457727 systemd[1]: Created slice kubepods-besteffort-podad3bb13e_1c86_4db6_ae51_4649533c6417.slice. Jul 14 22:10:27.492553 kubelet[1999]: I0714 22:10:27.492506 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dg98r\" (UniqueName: \"kubernetes.io/projected/ad3bb13e-1c86-4db6-ae51-4649533c6417-kube-api-access-dg98r\") pod \"tigera-operator-747864d56d-drkp9\" (UID: \"ad3bb13e-1c86-4db6-ae51-4649533c6417\") " pod="tigera-operator/tigera-operator-747864d56d-drkp9" Jul 14 22:10:27.492553 kubelet[1999]: I0714 22:10:27.492555 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/ad3bb13e-1c86-4db6-ae51-4649533c6417-var-lib-calico\") pod \"tigera-operator-747864d56d-drkp9\" (UID: \"ad3bb13e-1c86-4db6-ae51-4649533c6417\") " pod="tigera-operator/tigera-operator-747864d56d-drkp9" Jul 14 22:10:27.494476 kubelet[1999]: E0714 22:10:27.494445 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:27.665072 kubelet[1999]: E0714 22:10:27.665028 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:27.760884 env[1215]: time="2025-07-14T22:10:27.760469817Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-drkp9,Uid:ad3bb13e-1c86-4db6-ae51-4649533c6417,Namespace:tigera-operator,Attempt:0,}" Jul 14 22:10:27.773650 env[1215]: time="2025-07-14T22:10:27.773583409Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:10:27.773777 env[1215]: time="2025-07-14T22:10:27.773661929Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:10:27.773777 env[1215]: time="2025-07-14T22:10:27.773688209Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:10:27.774003 env[1215]: time="2025-07-14T22:10:27.773950809Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/268a5b65e883029ee8ae359baa5db28294da0ecafac5eff2fb6eee62d6d47f61 pid=2264 runtime=io.containerd.runc.v2 Jul 14 22:10:27.785468 systemd[1]: Started cri-containerd-268a5b65e883029ee8ae359baa5db28294da0ecafac5eff2fb6eee62d6d47f61.scope. Jul 14 22:10:27.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.806051 kernel: kauditd_printk_skb: 255 callbacks suppressed Jul 14 22:10:27.806109 kernel: audit: type=1400 audit(1752531027.803:893): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.808396 kernel: audit: type=1400 audit(1752531027.803:894): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.813094 kernel: audit: type=1400 audit(1752531027.803:895): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.813140 kernel: audit: type=1400 audit(1752531027.803:896): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.817857 kernel: audit: type=1400 audit(1752531027.803:897): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.817902 kernel: audit: type=1400 audit(1752531027.803:898): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.822552 kernel: audit: type=1400 audit(1752531027.803:899): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.822584 kernel: audit: type=1400 audit(1752531027.803:900): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.827139 kernel: audit: type=1400 audit(1752531027.803:901): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.827189 kernel: audit: type=1400 audit(1752531027.804:902): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.804000 audit: BPF prog-id=107 op=LOAD Jul 14 22:10:27.805000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.805000 audit[2274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2264 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:27.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236386135623635653838333032396565386165333539626161356462 Jul 14 22:10:27.805000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.805000 audit[2274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2264 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:27.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236386135623635653838333032396565386165333539626161356462 Jul 14 22:10:27.805000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.805000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.805000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.805000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.805000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.805000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.805000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.805000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.805000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.805000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.805000 audit: BPF prog-id=108 op=LOAD Jul 14 22:10:27.805000 audit[2274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2264 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:27.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236386135623635653838333032396565386165333539626161356462 Jul 14 22:10:27.807000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.807000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.807000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.807000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.807000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.807000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.807000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.807000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.807000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.807000 audit: BPF prog-id=109 op=LOAD Jul 14 22:10:27.807000 audit[2274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2264 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:27.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236386135623635653838333032396565386165333539626161356462 Jul 14 22:10:27.809000 audit: BPF prog-id=109 op=UNLOAD Jul 14 22:10:27.809000 audit: BPF prog-id=108 op=UNLOAD Jul 14 22:10:27.809000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.809000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.809000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.809000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.809000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.809000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.809000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.809000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.809000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.809000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:27.809000 audit: BPF prog-id=110 op=LOAD Jul 14 22:10:27.809000 audit[2274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2264 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:27.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236386135623635653838333032396565386165333539626161356462 Jul 14 22:10:27.838636 env[1215]: time="2025-07-14T22:10:27.838597209Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-drkp9,Uid:ad3bb13e-1c86-4db6-ae51-4649533c6417,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"268a5b65e883029ee8ae359baa5db28294da0ecafac5eff2fb6eee62d6d47f61\"" Jul 14 22:10:27.840698 env[1215]: time="2025-07-14T22:10:27.840613687Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 14 22:10:29.202163 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2500314847.mount: Deactivated successfully. Jul 14 22:10:30.200888 env[1215]: time="2025-07-14T22:10:30.200830729Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:30.203098 env[1215]: time="2025-07-14T22:10:30.203058048Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:30.204663 env[1215]: time="2025-07-14T22:10:30.204638927Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:30.206063 env[1215]: time="2025-07-14T22:10:30.206028807Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:30.206529 env[1215]: time="2025-07-14T22:10:30.206503566Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 14 22:10:30.209326 env[1215]: time="2025-07-14T22:10:30.209292005Z" level=info msg="CreateContainer within sandbox \"268a5b65e883029ee8ae359baa5db28294da0ecafac5eff2fb6eee62d6d47f61\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 14 22:10:30.221382 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2808130003.mount: Deactivated successfully. Jul 14 22:10:30.226174 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3868056574.mount: Deactivated successfully. Jul 14 22:10:30.229714 env[1215]: time="2025-07-14T22:10:30.229678435Z" level=info msg="CreateContainer within sandbox \"268a5b65e883029ee8ae359baa5db28294da0ecafac5eff2fb6eee62d6d47f61\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"52d2b2c7d4ca121da362471ad702ef8198be0c87394a9fb2741a4306966e3343\"" Jul 14 22:10:30.230071 env[1215]: time="2025-07-14T22:10:30.230032274Z" level=info msg="StartContainer for \"52d2b2c7d4ca121da362471ad702ef8198be0c87394a9fb2741a4306966e3343\"" Jul 14 22:10:30.244787 systemd[1]: Started cri-containerd-52d2b2c7d4ca121da362471ad702ef8198be0c87394a9fb2741a4306966e3343.scope. Jul 14 22:10:30.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.269000 audit: BPF prog-id=111 op=LOAD Jul 14 22:10:30.269000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.269000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2264 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:30.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532643262326337643463613132316461333632343731616437303265 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2264 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:30.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532643262326337643463613132316461333632343731616437303265 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit: BPF prog-id=112 op=LOAD Jul 14 22:10:30.270000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2264 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:30.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532643262326337643463613132316461333632343731616437303265 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit: BPF prog-id=113 op=LOAD Jul 14 22:10:30.270000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2264 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:30.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532643262326337643463613132316461333632343731616437303265 Jul 14 22:10:30.270000 audit: BPF prog-id=113 op=UNLOAD Jul 14 22:10:30.270000 audit: BPF prog-id=112 op=UNLOAD Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:30.270000 audit: BPF prog-id=114 op=LOAD Jul 14 22:10:30.270000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2264 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:30.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532643262326337643463613132316461333632343731616437303265 Jul 14 22:10:30.286596 env[1215]: time="2025-07-14T22:10:30.286481206Z" level=info msg="StartContainer for \"52d2b2c7d4ca121da362471ad702ef8198be0c87394a9fb2741a4306966e3343\" returns successfully" Jul 14 22:10:31.271573 kubelet[1999]: I0714 22:10:31.271513 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-drkp9" podStartSLOduration=1.903593957 podStartE2EDuration="4.271498155s" podCreationTimestamp="2025-07-14 22:10:27 +0000 UTC" firstStartedPulling="2025-07-14 22:10:27.839694128 +0000 UTC m=+11.714076858" lastFinishedPulling="2025-07-14 22:10:30.207598326 +0000 UTC m=+14.081981056" observedRunningTime="2025-07-14 22:10:31.271012795 +0000 UTC m=+15.145395525" watchObservedRunningTime="2025-07-14 22:10:31.271498155 +0000 UTC m=+15.145880885" Jul 14 22:10:35.785227 sudo[1351]: pam_unix(sudo:session): session closed for user root Jul 14 22:10:35.784000 audit[1351]: USER_END pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:10:35.786660 kernel: kauditd_printk_skb: 104 callbacks suppressed Jul 14 22:10:35.786728 kernel: audit: type=1106 audit(1752531035.784:929): pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:10:35.784000 audit[1351]: CRED_DISP pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:10:35.790513 sshd[1348]: pam_unix(sshd:session): session closed for user core Jul 14 22:10:35.792274 kernel: audit: type=1104 audit(1752531035.784:930): pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:10:35.792393 kernel: audit: type=1106 audit(1752531035.789:931): pid=1348 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:10:35.789000 audit[1348]: USER_END pid=1348 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:10:35.793157 systemd[1]: sshd@6-10.0.0.118:22-10.0.0.1:34618.service: Deactivated successfully. Jul 14 22:10:35.793841 systemd[1]: session-7.scope: Deactivated successfully. Jul 14 22:10:35.793985 systemd[1]: session-7.scope: Consumed 7.664s CPU time. Jul 14 22:10:35.794156 systemd-logind[1202]: Session 7 logged out. Waiting for processes to exit. Jul 14 22:10:35.794837 systemd-logind[1202]: Removed session 7. Jul 14 22:10:35.790000 audit[1348]: CRED_DISP pid=1348 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:10:35.798540 kernel: audit: type=1104 audit(1752531035.790:932): pid=1348 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:10:35.798612 kernel: audit: type=1131 audit(1752531035.791:933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.118:22-10.0.0.1:34618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:35.791000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.118:22-10.0.0.1:34618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:10:36.574000 audit[2392]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:36.574000 audit[2392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc8aa6200 a2=0 a3=1 items=0 ppid=2099 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:36.581337 kernel: audit: type=1325 audit(1752531036.574:934): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:36.581449 kernel: audit: type=1300 audit(1752531036.574:934): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc8aa6200 a2=0 a3=1 items=0 ppid=2099 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:36.581476 kernel: audit: type=1327 audit(1752531036.574:934): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:36.574000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:36.586000 audit[2392]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:36.590399 kernel: audit: type=1325 audit(1752531036.586:935): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:36.586000 audit[2392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc8aa6200 a2=0 a3=1 items=0 ppid=2099 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:36.586000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:36.595399 kernel: audit: type=1300 audit(1752531036.586:935): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc8aa6200 a2=0 a3=1 items=0 ppid=2099 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:36.600000 audit[2394]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2394 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:36.600000 audit[2394]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffde2aa540 a2=0 a3=1 items=0 ppid=2099 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:36.600000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:36.605000 audit[2394]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2394 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:36.605000 audit[2394]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffde2aa540 a2=0 a3=1 items=0 ppid=2099 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:36.605000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:40.592000 audit[2397]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:40.592000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdef40f70 a2=0 a3=1 items=0 ppid=2099 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:40.592000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:40.598000 audit[2397]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:40.598000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdef40f70 a2=0 a3=1 items=0 ppid=2099 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:40.598000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:40.619330 systemd[1]: Created slice kubepods-besteffort-podfb172f2b_8a81_4926_9cbc_beebc660ac1f.slice. Jul 14 22:10:40.641000 audit[2401]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:40.641000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd0b11670 a2=0 a3=1 items=0 ppid=2099 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:40.641000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:40.646000 audit[2401]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:40.646000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd0b11670 a2=0 a3=1 items=0 ppid=2099 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:40.646000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:40.688362 kubelet[1999]: I0714 22:10:40.688315 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fb172f2b-8a81-4926-9cbc-beebc660ac1f-tigera-ca-bundle\") pod \"calico-typha-7f8fd686cf-kqkm4\" (UID: \"fb172f2b-8a81-4926-9cbc-beebc660ac1f\") " pod="calico-system/calico-typha-7f8fd686cf-kqkm4" Jul 14 22:10:40.688362 kubelet[1999]: I0714 22:10:40.688364 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p4bk6\" (UniqueName: \"kubernetes.io/projected/fb172f2b-8a81-4926-9cbc-beebc660ac1f-kube-api-access-p4bk6\") pod \"calico-typha-7f8fd686cf-kqkm4\" (UID: \"fb172f2b-8a81-4926-9cbc-beebc660ac1f\") " pod="calico-system/calico-typha-7f8fd686cf-kqkm4" Jul 14 22:10:40.688744 kubelet[1999]: I0714 22:10:40.688402 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/fb172f2b-8a81-4926-9cbc-beebc660ac1f-typha-certs\") pod \"calico-typha-7f8fd686cf-kqkm4\" (UID: \"fb172f2b-8a81-4926-9cbc-beebc660ac1f\") " pod="calico-system/calico-typha-7f8fd686cf-kqkm4" Jul 14 22:10:40.878046 systemd[1]: Created slice kubepods-besteffort-pod37635980_80cc_4d31_88be_93fc9d0ed37e.slice. Jul 14 22:10:40.889974 kubelet[1999]: I0714 22:10:40.889926 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/37635980-80cc-4d31-88be-93fc9d0ed37e-cni-bin-dir\") pod \"calico-node-9bhg7\" (UID: \"37635980-80cc-4d31-88be-93fc9d0ed37e\") " pod="calico-system/calico-node-9bhg7" Jul 14 22:10:40.889974 kubelet[1999]: I0714 22:10:40.889978 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/37635980-80cc-4d31-88be-93fc9d0ed37e-flexvol-driver-host\") pod \"calico-node-9bhg7\" (UID: \"37635980-80cc-4d31-88be-93fc9d0ed37e\") " pod="calico-system/calico-node-9bhg7" Jul 14 22:10:40.890162 kubelet[1999]: I0714 22:10:40.889999 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/37635980-80cc-4d31-88be-93fc9d0ed37e-lib-modules\") pod \"calico-node-9bhg7\" (UID: \"37635980-80cc-4d31-88be-93fc9d0ed37e\") " pod="calico-system/calico-node-9bhg7" Jul 14 22:10:40.890162 kubelet[1999]: I0714 22:10:40.890017 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/37635980-80cc-4d31-88be-93fc9d0ed37e-node-certs\") pod \"calico-node-9bhg7\" (UID: \"37635980-80cc-4d31-88be-93fc9d0ed37e\") " pod="calico-system/calico-node-9bhg7" Jul 14 22:10:40.890162 kubelet[1999]: I0714 22:10:40.890034 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d5xmc\" (UniqueName: \"kubernetes.io/projected/37635980-80cc-4d31-88be-93fc9d0ed37e-kube-api-access-d5xmc\") pod \"calico-node-9bhg7\" (UID: \"37635980-80cc-4d31-88be-93fc9d0ed37e\") " pod="calico-system/calico-node-9bhg7" Jul 14 22:10:40.890162 kubelet[1999]: I0714 22:10:40.890052 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/37635980-80cc-4d31-88be-93fc9d0ed37e-var-run-calico\") pod \"calico-node-9bhg7\" (UID: \"37635980-80cc-4d31-88be-93fc9d0ed37e\") " pod="calico-system/calico-node-9bhg7" Jul 14 22:10:40.890162 kubelet[1999]: I0714 22:10:40.890136 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/37635980-80cc-4d31-88be-93fc9d0ed37e-cni-net-dir\") pod \"calico-node-9bhg7\" (UID: \"37635980-80cc-4d31-88be-93fc9d0ed37e\") " pod="calico-system/calico-node-9bhg7" Jul 14 22:10:40.890306 kubelet[1999]: I0714 22:10:40.890177 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/37635980-80cc-4d31-88be-93fc9d0ed37e-cni-log-dir\") pod \"calico-node-9bhg7\" (UID: \"37635980-80cc-4d31-88be-93fc9d0ed37e\") " pod="calico-system/calico-node-9bhg7" Jul 14 22:10:40.890306 kubelet[1999]: I0714 22:10:40.890194 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/37635980-80cc-4d31-88be-93fc9d0ed37e-policysync\") pod \"calico-node-9bhg7\" (UID: \"37635980-80cc-4d31-88be-93fc9d0ed37e\") " pod="calico-system/calico-node-9bhg7" Jul 14 22:10:40.890306 kubelet[1999]: I0714 22:10:40.890210 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/37635980-80cc-4d31-88be-93fc9d0ed37e-tigera-ca-bundle\") pod \"calico-node-9bhg7\" (UID: \"37635980-80cc-4d31-88be-93fc9d0ed37e\") " pod="calico-system/calico-node-9bhg7" Jul 14 22:10:40.890306 kubelet[1999]: I0714 22:10:40.890226 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/37635980-80cc-4d31-88be-93fc9d0ed37e-var-lib-calico\") pod \"calico-node-9bhg7\" (UID: \"37635980-80cc-4d31-88be-93fc9d0ed37e\") " pod="calico-system/calico-node-9bhg7" Jul 14 22:10:40.890306 kubelet[1999]: I0714 22:10:40.890241 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/37635980-80cc-4d31-88be-93fc9d0ed37e-xtables-lock\") pod \"calico-node-9bhg7\" (UID: \"37635980-80cc-4d31-88be-93fc9d0ed37e\") " pod="calico-system/calico-node-9bhg7" Jul 14 22:10:40.925632 kubelet[1999]: E0714 22:10:40.925598 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:40.935448 env[1215]: time="2025-07-14T22:10:40.935394003Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7f8fd686cf-kqkm4,Uid:fb172f2b-8a81-4926-9cbc-beebc660ac1f,Namespace:calico-system,Attempt:0,}" Jul 14 22:10:40.956683 env[1215]: time="2025-07-14T22:10:40.956591917Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:10:40.956683 env[1215]: time="2025-07-14T22:10:40.956638597Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:10:40.956683 env[1215]: time="2025-07-14T22:10:40.956649117Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:10:40.956865 env[1215]: time="2025-07-14T22:10:40.956794877Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bdf11e06919f58788a04478f758725dd88aaef4b12d3e8ea0bf02d84bb83e790 pid=2412 runtime=io.containerd.runc.v2 Jul 14 22:10:40.974924 systemd[1]: Started cri-containerd-bdf11e06919f58788a04478f758725dd88aaef4b12d3e8ea0bf02d84bb83e790.scope. Jul 14 22:10:40.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.001414 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 14 22:10:41.001531 kernel: audit: type=1400 audit(1752531040.993:942): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.001577 kernel: audit: type=1400 audit(1752531040.993:943): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.004440 kernel: audit: type=1400 audit(1752531040.993:944): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.005805 kubelet[1999]: E0714 22:10:41.005705 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.005805 kubelet[1999]: W0714 22:10:41.005725 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.006278 kubelet[1999]: E0714 22:10:41.006052 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.006278 kubelet[1999]: W0714 22:10:41.006073 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.006500 kubelet[1999]: E0714 22:10:41.006452 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.006556 kubelet[1999]: E0714 22:10:41.006488 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.006901 kernel: audit: type=1400 audit(1752531040.993:945): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.009292 kernel: audit: type=1400 audit(1752531040.993:946): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.011805 kernel: audit: type=1400 audit(1752531040.994:947): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.014400 kernel: audit: type=1400 audit(1752531040.994:948): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.017055 kernel: audit: type=1400 audit(1752531040.994:949): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.020281 kernel: audit: type=1400 audit(1752531040.994:950): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.020365 kernel: audit: type=1400 audit(1752531040.994:951): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.994000 audit: BPF prog-id=115 op=LOAD Jul 14 22:10:40.995000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.995000 audit[2422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2412 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:40.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264663131653036393139663538373838613034343738663735383732 Jul 14 22:10:40.995000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.995000 audit[2422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2412 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:40.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264663131653036393139663538373838613034343738663735383732 Jul 14 22:10:40.995000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.995000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.995000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.995000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.995000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.995000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.995000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.995000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.995000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.995000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.995000 audit: BPF prog-id=116 op=LOAD Jul 14 22:10:40.995000 audit[2422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2412 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:40.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264663131653036393139663538373838613034343738663735383732 Jul 14 22:10:40.997000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.997000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.997000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.997000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.997000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.997000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.997000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.997000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.997000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.997000 audit: BPF prog-id=117 op=LOAD Jul 14 22:10:40.997000 audit[2422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2412 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:40.997000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264663131653036393139663538373838613034343738663735383732 Jul 14 22:10:40.999000 audit: BPF prog-id=117 op=UNLOAD Jul 14 22:10:40.999000 audit: BPF prog-id=116 op=UNLOAD Jul 14 22:10:40.999000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.999000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.999000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.999000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.999000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.999000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.999000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.999000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.999000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.999000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:40.999000 audit: BPF prog-id=118 op=LOAD Jul 14 22:10:40.999000 audit[2422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2412 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:40.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264663131653036393139663538373838613034343738663735383732 Jul 14 22:10:41.034924 env[1215]: time="2025-07-14T22:10:41.034884737Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7f8fd686cf-kqkm4,Uid:fb172f2b-8a81-4926-9cbc-beebc660ac1f,Namespace:calico-system,Attempt:0,} returns sandbox id \"bdf11e06919f58788a04478f758725dd88aaef4b12d3e8ea0bf02d84bb83e790\"" Jul 14 22:10:41.040930 kubelet[1999]: E0714 22:10:41.040597 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:41.043218 env[1215]: time="2025-07-14T22:10:41.043188375Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 14 22:10:41.097032 kubelet[1999]: E0714 22:10:41.096981 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7cvd9" podUID="eef8fcaf-a4a7-424c-b65e-81db6db1c77a" Jul 14 22:10:41.177561 kubelet[1999]: E0714 22:10:41.177464 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.177561 kubelet[1999]: W0714 22:10:41.177489 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.177561 kubelet[1999]: E0714 22:10:41.177510 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.178467 kubelet[1999]: E0714 22:10:41.178445 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.178521 kubelet[1999]: W0714 22:10:41.178466 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.178550 kubelet[1999]: E0714 22:10:41.178520 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.178689 kubelet[1999]: E0714 22:10:41.178675 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.178689 kubelet[1999]: W0714 22:10:41.178689 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.178773 kubelet[1999]: E0714 22:10:41.178698 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.178828 kubelet[1999]: E0714 22:10:41.178814 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.178828 kubelet[1999]: W0714 22:10:41.178826 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.178892 kubelet[1999]: E0714 22:10:41.178853 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.179196 kubelet[1999]: E0714 22:10:41.179184 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.179229 kubelet[1999]: W0714 22:10:41.179196 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.179229 kubelet[1999]: E0714 22:10:41.179206 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.179497 kubelet[1999]: E0714 22:10:41.179485 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.179497 kubelet[1999]: W0714 22:10:41.179497 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.179566 kubelet[1999]: E0714 22:10:41.179506 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.179716 kubelet[1999]: E0714 22:10:41.179705 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.179716 kubelet[1999]: W0714 22:10:41.179716 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.179786 kubelet[1999]: E0714 22:10:41.179724 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.179918 kubelet[1999]: E0714 22:10:41.179909 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.179918 kubelet[1999]: W0714 22:10:41.179918 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.179984 kubelet[1999]: E0714 22:10:41.179925 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.180203 kubelet[1999]: E0714 22:10:41.180189 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.180203 kubelet[1999]: W0714 22:10:41.180200 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.180268 kubelet[1999]: E0714 22:10:41.180209 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.180464 kubelet[1999]: E0714 22:10:41.180453 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.180464 kubelet[1999]: W0714 22:10:41.180464 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.180531 kubelet[1999]: E0714 22:10:41.180472 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.180633 kubelet[1999]: E0714 22:10:41.180620 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.180633 kubelet[1999]: W0714 22:10:41.180631 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.180685 kubelet[1999]: E0714 22:10:41.180639 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.180889 kubelet[1999]: E0714 22:10:41.180878 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.180889 kubelet[1999]: W0714 22:10:41.180888 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.180952 kubelet[1999]: E0714 22:10:41.180895 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.181159 kubelet[1999]: E0714 22:10:41.181146 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.181159 kubelet[1999]: W0714 22:10:41.181155 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.181231 kubelet[1999]: E0714 22:10:41.181163 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.181316 kubelet[1999]: E0714 22:10:41.181302 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.181316 kubelet[1999]: W0714 22:10:41.181314 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.181398 kubelet[1999]: E0714 22:10:41.181323 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.181489 kubelet[1999]: E0714 22:10:41.181474 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.181489 kubelet[1999]: W0714 22:10:41.181486 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.181489 kubelet[1999]: E0714 22:10:41.181493 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.181854 kubelet[1999]: E0714 22:10:41.181815 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.181854 kubelet[1999]: W0714 22:10:41.181838 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.181854 kubelet[1999]: E0714 22:10:41.181851 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.182204 kubelet[1999]: E0714 22:10:41.182065 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.182204 kubelet[1999]: W0714 22:10:41.182080 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.182204 kubelet[1999]: E0714 22:10:41.182094 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.182492 env[1215]: time="2025-07-14T22:10:41.182454700Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-9bhg7,Uid:37635980-80cc-4d31-88be-93fc9d0ed37e,Namespace:calico-system,Attempt:0,}" Jul 14 22:10:41.182998 kubelet[1999]: E0714 22:10:41.182930 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.183039 kubelet[1999]: W0714 22:10:41.183000 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.183039 kubelet[1999]: E0714 22:10:41.183014 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.183441 kubelet[1999]: E0714 22:10:41.183425 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.183441 kubelet[1999]: W0714 22:10:41.183441 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.183521 kubelet[1999]: E0714 22:10:41.183453 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.184505 kubelet[1999]: E0714 22:10:41.184487 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.184505 kubelet[1999]: W0714 22:10:41.184504 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.184588 kubelet[1999]: E0714 22:10:41.184521 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.191520 kubelet[1999]: E0714 22:10:41.191490 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.191520 kubelet[1999]: W0714 22:10:41.191511 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.191520 kubelet[1999]: E0714 22:10:41.191526 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.191675 kubelet[1999]: I0714 22:10:41.191553 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/eef8fcaf-a4a7-424c-b65e-81db6db1c77a-socket-dir\") pod \"csi-node-driver-7cvd9\" (UID: \"eef8fcaf-a4a7-424c-b65e-81db6db1c77a\") " pod="calico-system/csi-node-driver-7cvd9" Jul 14 22:10:41.191765 kubelet[1999]: E0714 22:10:41.191733 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.191765 kubelet[1999]: W0714 22:10:41.191747 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.191765 kubelet[1999]: E0714 22:10:41.191763 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.191866 kubelet[1999]: I0714 22:10:41.191781 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/eef8fcaf-a4a7-424c-b65e-81db6db1c77a-registration-dir\") pod \"csi-node-driver-7cvd9\" (UID: \"eef8fcaf-a4a7-424c-b65e-81db6db1c77a\") " pod="calico-system/csi-node-driver-7cvd9" Jul 14 22:10:41.192321 kubelet[1999]: E0714 22:10:41.192278 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.192321 kubelet[1999]: W0714 22:10:41.192303 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.192428 kubelet[1999]: E0714 22:10:41.192341 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.192428 kubelet[1999]: I0714 22:10:41.192363 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/eef8fcaf-a4a7-424c-b65e-81db6db1c77a-kubelet-dir\") pod \"csi-node-driver-7cvd9\" (UID: \"eef8fcaf-a4a7-424c-b65e-81db6db1c77a\") " pod="calico-system/csi-node-driver-7cvd9" Jul 14 22:10:41.192619 kubelet[1999]: E0714 22:10:41.192604 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.192665 kubelet[1999]: W0714 22:10:41.192619 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.192665 kubelet[1999]: E0714 22:10:41.192637 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.192665 kubelet[1999]: I0714 22:10:41.192655 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/eef8fcaf-a4a7-424c-b65e-81db6db1c77a-varrun\") pod \"csi-node-driver-7cvd9\" (UID: \"eef8fcaf-a4a7-424c-b65e-81db6db1c77a\") " pod="calico-system/csi-node-driver-7cvd9" Jul 14 22:10:41.192923 kubelet[1999]: E0714 22:10:41.192878 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.192961 kubelet[1999]: W0714 22:10:41.192926 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.193082 kubelet[1999]: E0714 22:10:41.193014 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.193082 kubelet[1999]: I0714 22:10:41.193049 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k48d4\" (UniqueName: \"kubernetes.io/projected/eef8fcaf-a4a7-424c-b65e-81db6db1c77a-kube-api-access-k48d4\") pod \"csi-node-driver-7cvd9\" (UID: \"eef8fcaf-a4a7-424c-b65e-81db6db1c77a\") " pod="calico-system/csi-node-driver-7cvd9" Jul 14 22:10:41.193163 kubelet[1999]: E0714 22:10:41.193083 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.193163 kubelet[1999]: W0714 22:10:41.193092 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.193260 kubelet[1999]: E0714 22:10:41.193232 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.194140 kubelet[1999]: E0714 22:10:41.194120 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.194140 kubelet[1999]: W0714 22:10:41.194138 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.194302 kubelet[1999]: E0714 22:10:41.194264 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.195044 kubelet[1999]: E0714 22:10:41.195020 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.195044 kubelet[1999]: W0714 22:10:41.195039 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.195153 kubelet[1999]: E0714 22:10:41.195087 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.195248 kubelet[1999]: E0714 22:10:41.195235 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.195248 kubelet[1999]: W0714 22:10:41.195246 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.195398 kubelet[1999]: E0714 22:10:41.195352 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.195452 kubelet[1999]: E0714 22:10:41.195429 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.195452 kubelet[1999]: W0714 22:10:41.195438 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.195540 kubelet[1999]: E0714 22:10:41.195521 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.195581 kubelet[1999]: E0714 22:10:41.195567 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.195581 kubelet[1999]: W0714 22:10:41.195575 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.195637 kubelet[1999]: E0714 22:10:41.195586 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.195741 kubelet[1999]: E0714 22:10:41.195727 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.195782 kubelet[1999]: W0714 22:10:41.195742 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.195782 kubelet[1999]: E0714 22:10:41.195750 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.195891 kubelet[1999]: E0714 22:10:41.195878 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.195891 kubelet[1999]: W0714 22:10:41.195889 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.195950 kubelet[1999]: E0714 22:10:41.195897 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.196042 kubelet[1999]: E0714 22:10:41.196030 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.196042 kubelet[1999]: W0714 22:10:41.196040 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.196116 kubelet[1999]: E0714 22:10:41.196050 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.196242 kubelet[1999]: E0714 22:10:41.196226 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.196242 kubelet[1999]: W0714 22:10:41.196241 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.196319 kubelet[1999]: E0714 22:10:41.196252 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.204749 env[1215]: time="2025-07-14T22:10:41.204680134Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:10:41.204890 env[1215]: time="2025-07-14T22:10:41.204725254Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:10:41.204890 env[1215]: time="2025-07-14T22:10:41.204735374Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:10:41.205013 env[1215]: time="2025-07-14T22:10:41.204910934Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c073f25a98389f4c80b04fe01088d8f2eeafd897780509b7748b47d844e548db pid=2492 runtime=io.containerd.runc.v2 Jul 14 22:10:41.214782 systemd[1]: Started cri-containerd-c073f25a98389f4c80b04fe01088d8f2eeafd897780509b7748b47d844e548db.scope. Jul 14 22:10:41.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit: BPF prog-id=119 op=LOAD Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2492 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:41.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330373366323561393833383966346338306230346665303130383864 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2492 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:41.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330373366323561393833383966346338306230346665303130383864 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit: BPF prog-id=120 op=LOAD Jul 14 22:10:41.262000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2492 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:41.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330373366323561393833383966346338306230346665303130383864 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.262000 audit: BPF prog-id=121 op=LOAD Jul 14 22:10:41.262000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2492 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:41.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330373366323561393833383966346338306230346665303130383864 Jul 14 22:10:41.263000 audit: BPF prog-id=121 op=UNLOAD Jul 14 22:10:41.263000 audit: BPF prog-id=120 op=UNLOAD Jul 14 22:10:41.263000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.263000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.263000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.263000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.263000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.263000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.263000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.263000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.263000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.263000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:41.263000 audit: BPF prog-id=122 op=LOAD Jul 14 22:10:41.263000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2492 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:41.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330373366323561393833383966346338306230346665303130383864 Jul 14 22:10:41.282718 env[1215]: time="2025-07-14T22:10:41.282679075Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-9bhg7,Uid:37635980-80cc-4d31-88be-93fc9d0ed37e,Namespace:calico-system,Attempt:0,} returns sandbox id \"c073f25a98389f4c80b04fe01088d8f2eeafd897780509b7748b47d844e548db\"" Jul 14 22:10:41.294041 kubelet[1999]: E0714 22:10:41.294008 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.294041 kubelet[1999]: W0714 22:10:41.294032 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.294208 kubelet[1999]: E0714 22:10:41.294052 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.294313 kubelet[1999]: E0714 22:10:41.294289 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.294313 kubelet[1999]: W0714 22:10:41.294311 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.294403 kubelet[1999]: E0714 22:10:41.294330 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.294531 kubelet[1999]: E0714 22:10:41.294517 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.294531 kubelet[1999]: W0714 22:10:41.294528 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.294589 kubelet[1999]: E0714 22:10:41.294542 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.294728 kubelet[1999]: E0714 22:10:41.294715 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.294728 kubelet[1999]: W0714 22:10:41.294726 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.294789 kubelet[1999]: E0714 22:10:41.294739 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.294905 kubelet[1999]: E0714 22:10:41.294893 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.294905 kubelet[1999]: W0714 22:10:41.294903 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.294960 kubelet[1999]: E0714 22:10:41.294916 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.295133 kubelet[1999]: E0714 22:10:41.295115 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.295172 kubelet[1999]: W0714 22:10:41.295133 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.295172 kubelet[1999]: E0714 22:10:41.295151 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.295357 kubelet[1999]: E0714 22:10:41.295329 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.295357 kubelet[1999]: W0714 22:10:41.295342 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.295443 kubelet[1999]: E0714 22:10:41.295359 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.295638 kubelet[1999]: E0714 22:10:41.295524 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.295638 kubelet[1999]: W0714 22:10:41.295535 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.295638 kubelet[1999]: E0714 22:10:41.295543 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.295926 kubelet[1999]: E0714 22:10:41.295805 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.295926 kubelet[1999]: W0714 22:10:41.295820 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.295926 kubelet[1999]: E0714 22:10:41.295839 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.296162 kubelet[1999]: E0714 22:10:41.296071 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.296162 kubelet[1999]: W0714 22:10:41.296083 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.296162 kubelet[1999]: E0714 22:10:41.296114 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.296425 kubelet[1999]: E0714 22:10:41.296319 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.296425 kubelet[1999]: W0714 22:10:41.296330 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.296425 kubelet[1999]: E0714 22:10:41.296355 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.296787 kubelet[1999]: E0714 22:10:41.296690 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.296787 kubelet[1999]: W0714 22:10:41.296703 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.296787 kubelet[1999]: E0714 22:10:41.296732 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.297070 kubelet[1999]: E0714 22:10:41.296944 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.297070 kubelet[1999]: W0714 22:10:41.296957 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.297070 kubelet[1999]: E0714 22:10:41.296981 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.301255 kubelet[1999]: E0714 22:10:41.301105 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.301255 kubelet[1999]: W0714 22:10:41.301140 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.301255 kubelet[1999]: E0714 22:10:41.301188 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.301587 kubelet[1999]: E0714 22:10:41.301489 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.301587 kubelet[1999]: W0714 22:10:41.301503 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.301587 kubelet[1999]: E0714 22:10:41.301531 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.301831 kubelet[1999]: E0714 22:10:41.301736 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.301831 kubelet[1999]: W0714 22:10:41.301750 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.301831 kubelet[1999]: E0714 22:10:41.301775 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.302087 kubelet[1999]: E0714 22:10:41.301990 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.302087 kubelet[1999]: W0714 22:10:41.302004 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.302087 kubelet[1999]: E0714 22:10:41.302034 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.302357 kubelet[1999]: E0714 22:10:41.302229 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.302357 kubelet[1999]: W0714 22:10:41.302240 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.302357 kubelet[1999]: E0714 22:10:41.302330 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.302926 kubelet[1999]: E0714 22:10:41.302906 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.303010 kubelet[1999]: W0714 22:10:41.302995 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.303090 kubelet[1999]: E0714 22:10:41.303076 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.303416 kubelet[1999]: E0714 22:10:41.303365 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.303416 kubelet[1999]: W0714 22:10:41.303393 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.303537 kubelet[1999]: E0714 22:10:41.303422 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.303619 kubelet[1999]: E0714 22:10:41.303608 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.303654 kubelet[1999]: W0714 22:10:41.303620 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.303680 kubelet[1999]: E0714 22:10:41.303649 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.303804 kubelet[1999]: E0714 22:10:41.303785 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.303804 kubelet[1999]: W0714 22:10:41.303795 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.303921 kubelet[1999]: E0714 22:10:41.303900 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.304277 kubelet[1999]: E0714 22:10:41.304255 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.304277 kubelet[1999]: W0714 22:10:41.304272 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.304402 kubelet[1999]: E0714 22:10:41.304303 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.305469 kubelet[1999]: E0714 22:10:41.305443 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.305469 kubelet[1999]: W0714 22:10:41.305462 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.305578 kubelet[1999]: E0714 22:10:41.305483 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.305771 kubelet[1999]: E0714 22:10:41.305752 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.305771 kubelet[1999]: W0714 22:10:41.305771 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.305828 kubelet[1999]: E0714 22:10:41.305781 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.314460 kubelet[1999]: E0714 22:10:41.314437 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:41.314587 kubelet[1999]: W0714 22:10:41.314571 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:41.314653 kubelet[1999]: E0714 22:10:41.314640 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:41.657000 audit[2554]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2554 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:41.657000 audit[2554]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffdf896620 a2=0 a3=1 items=0 ppid=2099 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:41.657000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:41.664000 audit[2554]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2554 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:41.664000 audit[2554]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdf896620 a2=0 a3=1 items=0 ppid=2099 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:41.664000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:42.057502 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount918719528.mount: Deactivated successfully. Jul 14 22:10:42.794264 env[1215]: time="2025-07-14T22:10:42.794210030Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:42.795569 env[1215]: time="2025-07-14T22:10:42.795539190Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:42.797030 env[1215]: time="2025-07-14T22:10:42.797002710Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:42.798752 env[1215]: time="2025-07-14T22:10:42.798722789Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:42.799213 env[1215]: time="2025-07-14T22:10:42.799185149Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 14 22:10:42.800424 env[1215]: time="2025-07-14T22:10:42.800402349Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 14 22:10:42.812582 env[1215]: time="2025-07-14T22:10:42.812550586Z" level=info msg="CreateContainer within sandbox \"bdf11e06919f58788a04478f758725dd88aaef4b12d3e8ea0bf02d84bb83e790\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 14 22:10:42.824857 env[1215]: time="2025-07-14T22:10:42.824812583Z" level=info msg="CreateContainer within sandbox \"bdf11e06919f58788a04478f758725dd88aaef4b12d3e8ea0bf02d84bb83e790\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"aad6d554040581250b003696b8e4cc5ce0adba3ceecf74a6a62b6f7e95a1daa7\"" Jul 14 22:10:42.825762 env[1215]: time="2025-07-14T22:10:42.825732383Z" level=info msg="StartContainer for \"aad6d554040581250b003696b8e4cc5ce0adba3ceecf74a6a62b6f7e95a1daa7\"" Jul 14 22:10:42.847078 systemd[1]: Started cri-containerd-aad6d554040581250b003696b8e4cc5ce0adba3ceecf74a6a62b6f7e95a1daa7.scope. Jul 14 22:10:42.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit: BPF prog-id=123 op=LOAD Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2412 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:42.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161643664353534303430353831323530623030333639366238653463 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2412 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:42.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161643664353534303430353831323530623030333639366238653463 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit: BPF prog-id=124 op=LOAD Jul 14 22:10:42.873000 audit[2565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2412 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:42.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161643664353534303430353831323530623030333639366238653463 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.873000 audit: BPF prog-id=125 op=LOAD Jul 14 22:10:42.873000 audit[2565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2412 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:42.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161643664353534303430353831323530623030333639366238653463 Jul 14 22:10:42.874000 audit: BPF prog-id=125 op=UNLOAD Jul 14 22:10:42.874000 audit: BPF prog-id=124 op=UNLOAD Jul 14 22:10:42.874000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.874000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.874000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.874000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.874000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.874000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.874000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.874000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.874000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.874000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:42.874000 audit: BPF prog-id=126 op=LOAD Jul 14 22:10:42.874000 audit[2565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2412 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:42.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161643664353534303430353831323530623030333639366238653463 Jul 14 22:10:42.911490 env[1215]: time="2025-07-14T22:10:42.911444123Z" level=info msg="StartContainer for \"aad6d554040581250b003696b8e4cc5ce0adba3ceecf74a6a62b6f7e95a1daa7\" returns successfully" Jul 14 22:10:43.226178 kubelet[1999]: E0714 22:10:43.226131 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7cvd9" podUID="eef8fcaf-a4a7-424c-b65e-81db6db1c77a" Jul 14 22:10:43.287660 kubelet[1999]: E0714 22:10:43.287619 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:43.301039 kubelet[1999]: I0714 22:10:43.300984 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-7f8fd686cf-kqkm4" podStartSLOduration=1.542965142 podStartE2EDuration="3.300969196s" podCreationTimestamp="2025-07-14 22:10:40 +0000 UTC" firstStartedPulling="2025-07-14 22:10:41.042215735 +0000 UTC m=+24.916598465" lastFinishedPulling="2025-07-14 22:10:42.800219789 +0000 UTC m=+26.674602519" observedRunningTime="2025-07-14 22:10:43.299959637 +0000 UTC m=+27.174342407" watchObservedRunningTime="2025-07-14 22:10:43.300969196 +0000 UTC m=+27.175351926" Jul 14 22:10:43.302978 kubelet[1999]: E0714 22:10:43.302957 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.302978 kubelet[1999]: W0714 22:10:43.302976 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.303098 kubelet[1999]: E0714 22:10:43.302993 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.303815 kubelet[1999]: E0714 22:10:43.303798 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.303882 kubelet[1999]: W0714 22:10:43.303813 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.303882 kubelet[1999]: E0714 22:10:43.303855 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.304059 kubelet[1999]: E0714 22:10:43.304047 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.304103 kubelet[1999]: W0714 22:10:43.304059 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.304103 kubelet[1999]: E0714 22:10:43.304068 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.304262 kubelet[1999]: E0714 22:10:43.304252 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.304307 kubelet[1999]: W0714 22:10:43.304263 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.304307 kubelet[1999]: E0714 22:10:43.304272 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.304450 kubelet[1999]: E0714 22:10:43.304440 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.304450 kubelet[1999]: W0714 22:10:43.304450 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.304521 kubelet[1999]: E0714 22:10:43.304459 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.304600 kubelet[1999]: E0714 22:10:43.304591 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.304600 kubelet[1999]: W0714 22:10:43.304600 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.304664 kubelet[1999]: E0714 22:10:43.304608 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.304732 kubelet[1999]: E0714 22:10:43.304723 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.304732 kubelet[1999]: W0714 22:10:43.304732 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.304803 kubelet[1999]: E0714 22:10:43.304739 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.304874 kubelet[1999]: E0714 22:10:43.304865 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.304874 kubelet[1999]: W0714 22:10:43.304874 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.304944 kubelet[1999]: E0714 22:10:43.304883 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.305014 kubelet[1999]: E0714 22:10:43.305005 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.305014 kubelet[1999]: W0714 22:10:43.305014 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.305088 kubelet[1999]: E0714 22:10:43.305021 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.305151 kubelet[1999]: E0714 22:10:43.305141 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.305151 kubelet[1999]: W0714 22:10:43.305151 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.305221 kubelet[1999]: E0714 22:10:43.305159 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.305293 kubelet[1999]: E0714 22:10:43.305278 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.305336 kubelet[1999]: W0714 22:10:43.305294 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.305336 kubelet[1999]: E0714 22:10:43.305304 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.305445 kubelet[1999]: E0714 22:10:43.305435 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.305445 kubelet[1999]: W0714 22:10:43.305445 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.305516 kubelet[1999]: E0714 22:10:43.305453 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.305601 kubelet[1999]: E0714 22:10:43.305591 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.305601 kubelet[1999]: W0714 22:10:43.305601 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.305668 kubelet[1999]: E0714 22:10:43.305608 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.305740 kubelet[1999]: E0714 22:10:43.305731 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.305740 kubelet[1999]: W0714 22:10:43.305740 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.305804 kubelet[1999]: E0714 22:10:43.305747 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.305869 kubelet[1999]: E0714 22:10:43.305861 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.305869 kubelet[1999]: W0714 22:10:43.305869 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.305933 kubelet[1999]: E0714 22:10:43.305878 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.310306 kubelet[1999]: E0714 22:10:43.310282 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.310439 kubelet[1999]: W0714 22:10:43.310424 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.310525 kubelet[1999]: E0714 22:10:43.310513 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.310805 kubelet[1999]: E0714 22:10:43.310792 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.310899 kubelet[1999]: W0714 22:10:43.310886 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.310979 kubelet[1999]: E0714 22:10:43.310957 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.311174 kubelet[1999]: E0714 22:10:43.311156 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.311225 kubelet[1999]: W0714 22:10:43.311174 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.311225 kubelet[1999]: E0714 22:10:43.311192 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.311359 kubelet[1999]: E0714 22:10:43.311347 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.311359 kubelet[1999]: W0714 22:10:43.311357 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.311513 kubelet[1999]: E0714 22:10:43.311370 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.311555 kubelet[1999]: E0714 22:10:43.311535 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.311555 kubelet[1999]: W0714 22:10:43.311550 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.311613 kubelet[1999]: E0714 22:10:43.311558 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.311730 kubelet[1999]: E0714 22:10:43.311717 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.311730 kubelet[1999]: W0714 22:10:43.311727 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.311798 kubelet[1999]: E0714 22:10:43.311740 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.312051 kubelet[1999]: E0714 22:10:43.312034 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.312125 kubelet[1999]: W0714 22:10:43.312113 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.312195 kubelet[1999]: E0714 22:10:43.312183 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.312588 kubelet[1999]: E0714 22:10:43.312572 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.312680 kubelet[1999]: W0714 22:10:43.312666 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.312791 kubelet[1999]: E0714 22:10:43.312767 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.312957 kubelet[1999]: E0714 22:10:43.312943 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.313026 kubelet[1999]: W0714 22:10:43.313014 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.313207 kubelet[1999]: E0714 22:10:43.313192 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.313369 kubelet[1999]: E0714 22:10:43.313332 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.313463 kubelet[1999]: W0714 22:10:43.313450 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.313603 kubelet[1999]: E0714 22:10:43.313589 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.313816 kubelet[1999]: E0714 22:10:43.313797 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.313909 kubelet[1999]: W0714 22:10:43.313896 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.313993 kubelet[1999]: E0714 22:10:43.313982 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.314287 kubelet[1999]: E0714 22:10:43.314272 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.314477 kubelet[1999]: W0714 22:10:43.314361 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.314877 kubelet[1999]: E0714 22:10:43.314839 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.315245 kubelet[1999]: E0714 22:10:43.315231 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.315371 kubelet[1999]: W0714 22:10:43.315357 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.315517 kubelet[1999]: E0714 22:10:43.315502 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.315827 kubelet[1999]: E0714 22:10:43.315802 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.315916 kubelet[1999]: W0714 22:10:43.315903 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.316063 kubelet[1999]: E0714 22:10:43.316031 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.316984 kubelet[1999]: E0714 22:10:43.316963 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.317079 kubelet[1999]: W0714 22:10:43.317064 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.317168 kubelet[1999]: E0714 22:10:43.317153 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.317426 kubelet[1999]: E0714 22:10:43.317402 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.317426 kubelet[1999]: W0714 22:10:43.317418 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.317510 kubelet[1999]: E0714 22:10:43.317435 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.317643 kubelet[1999]: E0714 22:10:43.317633 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.317643 kubelet[1999]: W0714 22:10:43.317644 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.317705 kubelet[1999]: E0714 22:10:43.317653 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.318134 kubelet[1999]: E0714 22:10:43.318119 1999 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:10:43.318134 kubelet[1999]: W0714 22:10:43.318134 1999 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:10:43.318200 kubelet[1999]: E0714 22:10:43.318145 1999 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:10:43.957078 env[1215]: time="2025-07-14T22:10:43.957026333Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:43.958282 env[1215]: time="2025-07-14T22:10:43.958249572Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:43.959827 env[1215]: time="2025-07-14T22:10:43.959798492Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:43.961163 env[1215]: time="2025-07-14T22:10:43.961141652Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:43.961638 env[1215]: time="2025-07-14T22:10:43.961602692Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 14 22:10:43.963988 env[1215]: time="2025-07-14T22:10:43.963947491Z" level=info msg="CreateContainer within sandbox \"c073f25a98389f4c80b04fe01088d8f2eeafd897780509b7748b47d844e548db\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 14 22:10:43.979945 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3892732196.mount: Deactivated successfully. Jul 14 22:10:43.982601 env[1215]: time="2025-07-14T22:10:43.982562287Z" level=info msg="CreateContainer within sandbox \"c073f25a98389f4c80b04fe01088d8f2eeafd897780509b7748b47d844e548db\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"4003f686527b03d53d3713646220d5d38647c42e128c8ba0111b42c302e88e54\"" Jul 14 22:10:43.983305 env[1215]: time="2025-07-14T22:10:43.983250967Z" level=info msg="StartContainer for \"4003f686527b03d53d3713646220d5d38647c42e128c8ba0111b42c302e88e54\"" Jul 14 22:10:44.000130 systemd[1]: Started cri-containerd-4003f686527b03d53d3713646220d5d38647c42e128c8ba0111b42c302e88e54.scope. Jul 14 22:10:44.035000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.035000 audit[2637]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2492 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:44.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303366363836353237623033643533643337313336343632323064 Jul 14 22:10:44.036000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.036000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.036000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.036000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.036000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.036000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.036000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.036000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.036000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.036000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.036000 audit: BPF prog-id=127 op=LOAD Jul 14 22:10:44.036000 audit[2637]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2492 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:44.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303366363836353237623033643533643337313336343632323064 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit: BPF prog-id=128 op=LOAD Jul 14 22:10:44.037000 audit[2637]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2492 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:44.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303366363836353237623033643533643337313336343632323064 Jul 14 22:10:44.037000 audit: BPF prog-id=128 op=UNLOAD Jul 14 22:10:44.037000 audit: BPF prog-id=127 op=UNLOAD Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:44.037000 audit: BPF prog-id=129 op=LOAD Jul 14 22:10:44.037000 audit[2637]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2492 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:44.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303366363836353237623033643533643337313336343632323064 Jul 14 22:10:44.053611 env[1215]: time="2025-07-14T22:10:44.053557472Z" level=info msg="StartContainer for \"4003f686527b03d53d3713646220d5d38647c42e128c8ba0111b42c302e88e54\" returns successfully" Jul 14 22:10:44.077043 systemd[1]: cri-containerd-4003f686527b03d53d3713646220d5d38647c42e128c8ba0111b42c302e88e54.scope: Deactivated successfully. Jul 14 22:10:44.083000 audit: BPF prog-id=129 op=UNLOAD Jul 14 22:10:44.113047 env[1215]: time="2025-07-14T22:10:44.113002900Z" level=info msg="shim disconnected" id=4003f686527b03d53d3713646220d5d38647c42e128c8ba0111b42c302e88e54 Jul 14 22:10:44.113047 env[1215]: time="2025-07-14T22:10:44.113045300Z" level=warning msg="cleaning up after shim disconnected" id=4003f686527b03d53d3713646220d5d38647c42e128c8ba0111b42c302e88e54 namespace=k8s.io Jul 14 22:10:44.113047 env[1215]: time="2025-07-14T22:10:44.113054620Z" level=info msg="cleaning up dead shim" Jul 14 22:10:44.120472 env[1215]: time="2025-07-14T22:10:44.120433778Z" level=warning msg="cleanup warnings time=\"2025-07-14T22:10:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2675 runtime=io.containerd.runc.v2\n" Jul 14 22:10:44.290238 kubelet[1999]: I0714 22:10:44.290091 1999 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:10:44.292470 kubelet[1999]: E0714 22:10:44.290601 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:44.292512 env[1215]: time="2025-07-14T22:10:44.292420383Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 14 22:10:44.806442 systemd[1]: run-containerd-runc-k8s.io-4003f686527b03d53d3713646220d5d38647c42e128c8ba0111b42c302e88e54-runc.zY1xf4.mount: Deactivated successfully. Jul 14 22:10:44.806534 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4003f686527b03d53d3713646220d5d38647c42e128c8ba0111b42c302e88e54-rootfs.mount: Deactivated successfully. Jul 14 22:10:45.226358 kubelet[1999]: E0714 22:10:45.226289 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7cvd9" podUID="eef8fcaf-a4a7-424c-b65e-81db6db1c77a" Jul 14 22:10:46.453737 kubelet[1999]: I0714 22:10:46.453685 1999 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:10:46.454148 kubelet[1999]: E0714 22:10:46.453971 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:46.486000 audit[2694]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2694 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:46.490322 kernel: kauditd_printk_skb: 211 callbacks suppressed Jul 14 22:10:46.490438 kernel: audit: type=1325 audit(1752531046.486:1005): table=filter:99 family=2 entries=21 op=nft_register_rule pid=2694 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:46.490472 kernel: audit: type=1300 audit(1752531046.486:1005): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff688a820 a2=0 a3=1 items=0 ppid=2099 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:46.486000 audit[2694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff688a820 a2=0 a3=1 items=0 ppid=2099 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:46.486000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:46.495899 kernel: audit: type=1327 audit(1752531046.486:1005): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:46.496000 audit[2694]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2694 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:46.496000 audit[2694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffff688a820 a2=0 a3=1 items=0 ppid=2099 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:46.503498 kernel: audit: type=1325 audit(1752531046.496:1006): table=nat:100 family=2 entries=19 op=nft_register_chain pid=2694 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:10:46.503557 kernel: audit: type=1300 audit(1752531046.496:1006): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffff688a820 a2=0 a3=1 items=0 ppid=2099 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:46.503578 kernel: audit: type=1327 audit(1752531046.496:1006): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:46.496000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:10:47.225703 kubelet[1999]: E0714 22:10:47.225653 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7cvd9" podUID="eef8fcaf-a4a7-424c-b65e-81db6db1c77a" Jul 14 22:10:47.293793 kubelet[1999]: E0714 22:10:47.293753 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:47.363912 env[1215]: time="2025-07-14T22:10:47.363855043Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:47.366143 env[1215]: time="2025-07-14T22:10:47.366107882Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:47.370203 env[1215]: time="2025-07-14T22:10:47.370164122Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:47.371636 env[1215]: time="2025-07-14T22:10:47.371609041Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:47.372083 env[1215]: time="2025-07-14T22:10:47.372051801Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 14 22:10:47.374205 env[1215]: time="2025-07-14T22:10:47.374171121Z" level=info msg="CreateContainer within sandbox \"c073f25a98389f4c80b04fe01088d8f2eeafd897780509b7748b47d844e548db\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 14 22:10:47.389410 env[1215]: time="2025-07-14T22:10:47.389317878Z" level=info msg="CreateContainer within sandbox \"c073f25a98389f4c80b04fe01088d8f2eeafd897780509b7748b47d844e548db\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"5dbd513ede2eb1919390d8fe79df98da6444b965b29502f9dbbaa4f2fbef1274\"" Jul 14 22:10:47.390647 env[1215]: time="2025-07-14T22:10:47.390619038Z" level=info msg="StartContainer for \"5dbd513ede2eb1919390d8fe79df98da6444b965b29502f9dbbaa4f2fbef1274\"" Jul 14 22:10:47.409266 systemd[1]: Started cri-containerd-5dbd513ede2eb1919390d8fe79df98da6444b965b29502f9dbbaa4f2fbef1274.scope. Jul 14 22:10:47.439000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.439000 audit[2703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2492 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:47.447446 kernel: audit: type=1400 audit(1752531047.439:1007): avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.447533 kernel: audit: type=1300 audit(1752531047.439:1007): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2492 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:47.447561 kernel: audit: type=1327 audit(1752531047.439:1007): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564626435313365646532656231393139333930643866653739646639 Jul 14 22:10:47.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564626435313365646532656231393139333930643866653739646639 Jul 14 22:10:47.440000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.453292 kernel: audit: type=1400 audit(1752531047.440:1008): avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.440000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.440000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.440000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.440000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.440000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.440000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.440000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.440000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.440000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.440000 audit: BPF prog-id=130 op=LOAD Jul 14 22:10:47.440000 audit[2703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2492 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:47.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564626435313365646532656231393139333930643866653739646639 Jul 14 22:10:47.442000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.442000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.442000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.442000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.442000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.442000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.442000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.442000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.442000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.442000 audit: BPF prog-id=131 op=LOAD Jul 14 22:10:47.442000 audit[2703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2492 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:47.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564626435313365646532656231393139333930643866653739646639 Jul 14 22:10:47.446000 audit: BPF prog-id=131 op=UNLOAD Jul 14 22:10:47.446000 audit: BPF prog-id=130 op=UNLOAD Jul 14 22:10:47.446000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.446000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.446000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.446000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.446000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.446000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.446000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.446000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.446000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.446000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:47.446000 audit: BPF prog-id=132 op=LOAD Jul 14 22:10:47.446000 audit[2703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2492 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:47.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564626435313365646532656231393139333930643866653739646639 Jul 14 22:10:47.468782 env[1215]: time="2025-07-14T22:10:47.468738625Z" level=info msg="StartContainer for \"5dbd513ede2eb1919390d8fe79df98da6444b965b29502f9dbbaa4f2fbef1274\" returns successfully" Jul 14 22:10:48.114195 env[1215]: time="2025-07-14T22:10:48.114139917Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 22:10:48.116398 systemd[1]: cri-containerd-5dbd513ede2eb1919390d8fe79df98da6444b965b29502f9dbbaa4f2fbef1274.scope: Deactivated successfully. Jul 14 22:10:48.119000 audit: BPF prog-id=132 op=UNLOAD Jul 14 22:10:48.158381 kubelet[1999]: I0714 22:10:48.158335 1999 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 14 22:10:48.159148 env[1215]: time="2025-07-14T22:10:48.159096070Z" level=info msg="shim disconnected" id=5dbd513ede2eb1919390d8fe79df98da6444b965b29502f9dbbaa4f2fbef1274 Jul 14 22:10:48.159321 env[1215]: time="2025-07-14T22:10:48.159302750Z" level=warning msg="cleaning up after shim disconnected" id=5dbd513ede2eb1919390d8fe79df98da6444b965b29502f9dbbaa4f2fbef1274 namespace=k8s.io Jul 14 22:10:48.159413 env[1215]: time="2025-07-14T22:10:48.159398550Z" level=info msg="cleaning up dead shim" Jul 14 22:10:48.168734 env[1215]: time="2025-07-14T22:10:48.168683788Z" level=warning msg="cleanup warnings time=\"2025-07-14T22:10:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2743 runtime=io.containerd.runc.v2\n" Jul 14 22:10:48.192798 systemd[1]: Created slice kubepods-besteffort-pod52394d10_30d6_44c3_a9bb_9a8079034400.slice. Jul 14 22:10:48.199027 systemd[1]: Created slice kubepods-burstable-pode5244a42_16bb_47e0_a9b1_018b075643ee.slice. Jul 14 22:10:48.206839 systemd[1]: Created slice kubepods-besteffort-podd74727d3_06bd_4249_8964_7a335825fdf9.slice. Jul 14 22:10:48.211316 systemd[1]: Created slice kubepods-besteffort-podd8c1108b_9df8_49ba_a271_e4b581ab48a1.slice. Jul 14 22:10:48.216488 systemd[1]: Created slice kubepods-besteffort-pod6c50cb2a_3c39_4f9d_91d6_7f2c4d312652.slice. Jul 14 22:10:48.222585 systemd[1]: Created slice kubepods-burstable-podb6800f40_1a9b_4489_93ca_766d5603dcc6.slice. Jul 14 22:10:48.229432 systemd[1]: Created slice kubepods-besteffort-podf5a3fd3e_f137_4577_886c_7cb3c9ae091a.slice. Jul 14 22:10:48.233666 systemd[1]: Created slice kubepods-besteffort-podc5224d5a_68ce_4d91_9c1a_81aee0017fc6.slice. Jul 14 22:10:48.250977 kubelet[1999]: I0714 22:10:48.250939 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qvdwb\" (UniqueName: \"kubernetes.io/projected/f5a3fd3e-f137-4577-886c-7cb3c9ae091a-kube-api-access-qvdwb\") pod \"calico-apiserver-6cfff6787d-9cqb9\" (UID: \"f5a3fd3e-f137-4577-886c-7cb3c9ae091a\") " pod="calico-apiserver/calico-apiserver-6cfff6787d-9cqb9" Jul 14 22:10:48.250977 kubelet[1999]: I0714 22:10:48.250980 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/b6800f40-1a9b-4489-93ca-766d5603dcc6-config-volume\") pod \"coredns-668d6bf9bc-vdc7j\" (UID: \"b6800f40-1a9b-4489-93ca-766d5603dcc6\") " pod="kube-system/coredns-668d6bf9bc-vdc7j" Jul 14 22:10:48.251135 kubelet[1999]: I0714 22:10:48.251001 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d74727d3-06bd-4249-8964-7a335825fdf9-tigera-ca-bundle\") pod \"calico-kube-controllers-64bcf76967-h67vb\" (UID: \"d74727d3-06bd-4249-8964-7a335825fdf9\") " pod="calico-system/calico-kube-controllers-64bcf76967-h67vb" Jul 14 22:10:48.251135 kubelet[1999]: I0714 22:10:48.251019 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/52394d10-30d6-44c3-a9bb-9a8079034400-whisker-ca-bundle\") pod \"whisker-86b44b5b85-vwhfb\" (UID: \"52394d10-30d6-44c3-a9bb-9a8079034400\") " pod="calico-system/whisker-86b44b5b85-vwhfb" Jul 14 22:10:48.251135 kubelet[1999]: I0714 22:10:48.251034 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6cpnv\" (UniqueName: \"kubernetes.io/projected/e5244a42-16bb-47e0-a9b1-018b075643ee-kube-api-access-6cpnv\") pod \"coredns-668d6bf9bc-4b2tn\" (UID: \"e5244a42-16bb-47e0-a9b1-018b075643ee\") " pod="kube-system/coredns-668d6bf9bc-4b2tn" Jul 14 22:10:48.251135 kubelet[1999]: I0714 22:10:48.251049 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c5224d5a-68ce-4d91-9c1a-81aee0017fc6-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-z7ctx\" (UID: \"c5224d5a-68ce-4d91-9c1a-81aee0017fc6\") " pod="calico-system/goldmane-768f4c5c69-z7ctx" Jul 14 22:10:48.251135 kubelet[1999]: I0714 22:10:48.251064 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-78lgr\" (UniqueName: \"kubernetes.io/projected/c5224d5a-68ce-4d91-9c1a-81aee0017fc6-kube-api-access-78lgr\") pod \"goldmane-768f4c5c69-z7ctx\" (UID: \"c5224d5a-68ce-4d91-9c1a-81aee0017fc6\") " pod="calico-system/goldmane-768f4c5c69-z7ctx" Jul 14 22:10:48.251268 kubelet[1999]: I0714 22:10:48.251084 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fkl2r\" (UniqueName: \"kubernetes.io/projected/6c50cb2a-3c39-4f9d-91d6-7f2c4d312652-kube-api-access-fkl2r\") pod \"calico-apiserver-7c87d7d578-68hlv\" (UID: \"6c50cb2a-3c39-4f9d-91d6-7f2c4d312652\") " pod="calico-apiserver/calico-apiserver-7c87d7d578-68hlv" Jul 14 22:10:48.251268 kubelet[1999]: I0714 22:10:48.251099 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lgxt5\" (UniqueName: \"kubernetes.io/projected/d8c1108b-9df8-49ba-a271-e4b581ab48a1-kube-api-access-lgxt5\") pod \"calico-apiserver-7c87d7d578-msz9q\" (UID: \"d8c1108b-9df8-49ba-a271-e4b581ab48a1\") " pod="calico-apiserver/calico-apiserver-7c87d7d578-msz9q" Jul 14 22:10:48.251268 kubelet[1999]: I0714 22:10:48.251117 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/c5224d5a-68ce-4d91-9c1a-81aee0017fc6-goldmane-key-pair\") pod \"goldmane-768f4c5c69-z7ctx\" (UID: \"c5224d5a-68ce-4d91-9c1a-81aee0017fc6\") " pod="calico-system/goldmane-768f4c5c69-z7ctx" Jul 14 22:10:48.251268 kubelet[1999]: I0714 22:10:48.251132 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n77kl\" (UniqueName: \"kubernetes.io/projected/52394d10-30d6-44c3-a9bb-9a8079034400-kube-api-access-n77kl\") pod \"whisker-86b44b5b85-vwhfb\" (UID: \"52394d10-30d6-44c3-a9bb-9a8079034400\") " pod="calico-system/whisker-86b44b5b85-vwhfb" Jul 14 22:10:48.251268 kubelet[1999]: I0714 22:10:48.251149 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zz9fg\" (UniqueName: \"kubernetes.io/projected/d74727d3-06bd-4249-8964-7a335825fdf9-kube-api-access-zz9fg\") pod \"calico-kube-controllers-64bcf76967-h67vb\" (UID: \"d74727d3-06bd-4249-8964-7a335825fdf9\") " pod="calico-system/calico-kube-controllers-64bcf76967-h67vb" Jul 14 22:10:48.251423 kubelet[1999]: I0714 22:10:48.251166 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/c5224d5a-68ce-4d91-9c1a-81aee0017fc6-config\") pod \"goldmane-768f4c5c69-z7ctx\" (UID: \"c5224d5a-68ce-4d91-9c1a-81aee0017fc6\") " pod="calico-system/goldmane-768f4c5c69-z7ctx" Jul 14 22:10:48.251423 kubelet[1999]: I0714 22:10:48.251183 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/f5a3fd3e-f137-4577-886c-7cb3c9ae091a-calico-apiserver-certs\") pod \"calico-apiserver-6cfff6787d-9cqb9\" (UID: \"f5a3fd3e-f137-4577-886c-7cb3c9ae091a\") " pod="calico-apiserver/calico-apiserver-6cfff6787d-9cqb9" Jul 14 22:10:48.251423 kubelet[1999]: I0714 22:10:48.251198 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c7zml\" (UniqueName: \"kubernetes.io/projected/b6800f40-1a9b-4489-93ca-766d5603dcc6-kube-api-access-c7zml\") pod \"coredns-668d6bf9bc-vdc7j\" (UID: \"b6800f40-1a9b-4489-93ca-766d5603dcc6\") " pod="kube-system/coredns-668d6bf9bc-vdc7j" Jul 14 22:10:48.251423 kubelet[1999]: I0714 22:10:48.251213 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d8c1108b-9df8-49ba-a271-e4b581ab48a1-calico-apiserver-certs\") pod \"calico-apiserver-7c87d7d578-msz9q\" (UID: \"d8c1108b-9df8-49ba-a271-e4b581ab48a1\") " pod="calico-apiserver/calico-apiserver-7c87d7d578-msz9q" Jul 14 22:10:48.251423 kubelet[1999]: I0714 22:10:48.251228 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/e5244a42-16bb-47e0-a9b1-018b075643ee-config-volume\") pod \"coredns-668d6bf9bc-4b2tn\" (UID: \"e5244a42-16bb-47e0-a9b1-018b075643ee\") " pod="kube-system/coredns-668d6bf9bc-4b2tn" Jul 14 22:10:48.251550 kubelet[1999]: I0714 22:10:48.251246 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/52394d10-30d6-44c3-a9bb-9a8079034400-whisker-backend-key-pair\") pod \"whisker-86b44b5b85-vwhfb\" (UID: \"52394d10-30d6-44c3-a9bb-9a8079034400\") " pod="calico-system/whisker-86b44b5b85-vwhfb" Jul 14 22:10:48.251550 kubelet[1999]: I0714 22:10:48.251263 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6c50cb2a-3c39-4f9d-91d6-7f2c4d312652-calico-apiserver-certs\") pod \"calico-apiserver-7c87d7d578-68hlv\" (UID: \"6c50cb2a-3c39-4f9d-91d6-7f2c4d312652\") " pod="calico-apiserver/calico-apiserver-7c87d7d578-68hlv" Jul 14 22:10:48.299772 env[1215]: time="2025-07-14T22:10:48.299740287Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 14 22:10:48.394115 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5dbd513ede2eb1919390d8fe79df98da6444b965b29502f9dbbaa4f2fbef1274-rootfs.mount: Deactivated successfully. Jul 14 22:10:48.497118 env[1215]: time="2025-07-14T22:10:48.497063976Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-86b44b5b85-vwhfb,Uid:52394d10-30d6-44c3-a9bb-9a8079034400,Namespace:calico-system,Attempt:0,}" Jul 14 22:10:48.505363 kubelet[1999]: E0714 22:10:48.505329 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:48.506873 env[1215]: time="2025-07-14T22:10:48.506803975Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-4b2tn,Uid:e5244a42-16bb-47e0-a9b1-018b075643ee,Namespace:kube-system,Attempt:0,}" Jul 14 22:10:48.513354 env[1215]: time="2025-07-14T22:10:48.513097574Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-64bcf76967-h67vb,Uid:d74727d3-06bd-4249-8964-7a335825fdf9,Namespace:calico-system,Attempt:0,}" Jul 14 22:10:48.522437 env[1215]: time="2025-07-14T22:10:48.522403852Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c87d7d578-68hlv,Uid:6c50cb2a-3c39-4f9d-91d6-7f2c4d312652,Namespace:calico-apiserver,Attempt:0,}" Jul 14 22:10:48.523208 env[1215]: time="2025-07-14T22:10:48.523176012Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c87d7d578-msz9q,Uid:d8c1108b-9df8-49ba-a271-e4b581ab48a1,Namespace:calico-apiserver,Attempt:0,}" Jul 14 22:10:48.530194 kubelet[1999]: E0714 22:10:48.530151 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:10:48.531771 env[1215]: time="2025-07-14T22:10:48.530740931Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-vdc7j,Uid:b6800f40-1a9b-4489-93ca-766d5603dcc6,Namespace:kube-system,Attempt:0,}" Jul 14 22:10:48.536698 env[1215]: time="2025-07-14T22:10:48.535960530Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-z7ctx,Uid:c5224d5a-68ce-4d91-9c1a-81aee0017fc6,Namespace:calico-system,Attempt:0,}" Jul 14 22:10:48.536698 env[1215]: time="2025-07-14T22:10:48.535981130Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6cfff6787d-9cqb9,Uid:f5a3fd3e-f137-4577-886c-7cb3c9ae091a,Namespace:calico-apiserver,Attempt:0,}" Jul 14 22:10:48.792293 env[1215]: time="2025-07-14T22:10:48.792147609Z" level=error msg="Failed to destroy network for sandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.792801 env[1215]: time="2025-07-14T22:10:48.792696889Z" level=error msg="encountered an error cleaning up failed sandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.792801 env[1215]: time="2025-07-14T22:10:48.792754369Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-z7ctx,Uid:c5224d5a-68ce-4d91-9c1a-81aee0017fc6,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.793018 kubelet[1999]: E0714 22:10:48.792979 1999 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.793613 kubelet[1999]: E0714 22:10:48.793565 1999 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-z7ctx" Jul 14 22:10:48.793613 kubelet[1999]: E0714 22:10:48.793610 1999 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-z7ctx" Jul 14 22:10:48.793714 kubelet[1999]: E0714 22:10:48.793658 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-z7ctx_calico-system(c5224d5a-68ce-4d91-9c1a-81aee0017fc6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-z7ctx_calico-system(c5224d5a-68ce-4d91-9c1a-81aee0017fc6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-z7ctx" podUID="c5224d5a-68ce-4d91-9c1a-81aee0017fc6" Jul 14 22:10:48.796987 env[1215]: time="2025-07-14T22:10:48.796876849Z" level=error msg="Failed to destroy network for sandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.797506 env[1215]: time="2025-07-14T22:10:48.797469408Z" level=error msg="encountered an error cleaning up failed sandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.797639 env[1215]: time="2025-07-14T22:10:48.797610288Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-64bcf76967-h67vb,Uid:d74727d3-06bd-4249-8964-7a335825fdf9,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.797893 kubelet[1999]: E0714 22:10:48.797858 1999 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.797957 kubelet[1999]: E0714 22:10:48.797900 1999 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-64bcf76967-h67vb" Jul 14 22:10:48.797957 kubelet[1999]: E0714 22:10:48.797920 1999 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-64bcf76967-h67vb" Jul 14 22:10:48.798019 kubelet[1999]: E0714 22:10:48.797951 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-64bcf76967-h67vb_calico-system(d74727d3-06bd-4249-8964-7a335825fdf9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-64bcf76967-h67vb_calico-system(d74727d3-06bd-4249-8964-7a335825fdf9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-64bcf76967-h67vb" podUID="d74727d3-06bd-4249-8964-7a335825fdf9" Jul 14 22:10:48.801703 env[1215]: time="2025-07-14T22:10:48.801660928Z" level=error msg="Failed to destroy network for sandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.802052 env[1215]: time="2025-07-14T22:10:48.802013448Z" level=error msg="encountered an error cleaning up failed sandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.802116 env[1215]: time="2025-07-14T22:10:48.802059008Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c87d7d578-68hlv,Uid:6c50cb2a-3c39-4f9d-91d6-7f2c4d312652,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.802242 kubelet[1999]: E0714 22:10:48.802212 1999 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.802305 kubelet[1999]: E0714 22:10:48.802252 1999 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7c87d7d578-68hlv" Jul 14 22:10:48.802305 kubelet[1999]: E0714 22:10:48.802282 1999 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7c87d7d578-68hlv" Jul 14 22:10:48.802369 kubelet[1999]: E0714 22:10:48.802314 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7c87d7d578-68hlv_calico-apiserver(6c50cb2a-3c39-4f9d-91d6-7f2c4d312652)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7c87d7d578-68hlv_calico-apiserver(6c50cb2a-3c39-4f9d-91d6-7f2c4d312652)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7c87d7d578-68hlv" podUID="6c50cb2a-3c39-4f9d-91d6-7f2c4d312652" Jul 14 22:10:48.805521 env[1215]: time="2025-07-14T22:10:48.805472807Z" level=error msg="Failed to destroy network for sandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.805825 env[1215]: time="2025-07-14T22:10:48.805784087Z" level=error msg="encountered an error cleaning up failed sandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.805882 env[1215]: time="2025-07-14T22:10:48.805840807Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-vdc7j,Uid:b6800f40-1a9b-4489-93ca-766d5603dcc6,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.806312 kubelet[1999]: E0714 22:10:48.806001 1999 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.806312 kubelet[1999]: E0714 22:10:48.806050 1999 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-vdc7j" Jul 14 22:10:48.806312 kubelet[1999]: E0714 22:10:48.806067 1999 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-vdc7j" Jul 14 22:10:48.806465 kubelet[1999]: E0714 22:10:48.806097 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-vdc7j_kube-system(b6800f40-1a9b-4489-93ca-766d5603dcc6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-vdc7j_kube-system(b6800f40-1a9b-4489-93ca-766d5603dcc6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-vdc7j" podUID="b6800f40-1a9b-4489-93ca-766d5603dcc6" Jul 14 22:10:48.809991 env[1215]: time="2025-07-14T22:10:48.809942126Z" level=error msg="Failed to destroy network for sandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.810432 env[1215]: time="2025-07-14T22:10:48.810397286Z" level=error msg="encountered an error cleaning up failed sandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.810545 env[1215]: time="2025-07-14T22:10:48.810518286Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6cfff6787d-9cqb9,Uid:f5a3fd3e-f137-4577-886c-7cb3c9ae091a,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.811040 kubelet[1999]: E0714 22:10:48.810758 1999 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.811040 kubelet[1999]: E0714 22:10:48.810807 1999 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6cfff6787d-9cqb9" Jul 14 22:10:48.811040 kubelet[1999]: E0714 22:10:48.810824 1999 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6cfff6787d-9cqb9" Jul 14 22:10:48.811182 kubelet[1999]: E0714 22:10:48.810851 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6cfff6787d-9cqb9_calico-apiserver(f5a3fd3e-f137-4577-886c-7cb3c9ae091a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6cfff6787d-9cqb9_calico-apiserver(f5a3fd3e-f137-4577-886c-7cb3c9ae091a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6cfff6787d-9cqb9" podUID="f5a3fd3e-f137-4577-886c-7cb3c9ae091a" Jul 14 22:10:48.814484 env[1215]: time="2025-07-14T22:10:48.814429646Z" level=error msg="Failed to destroy network for sandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.814781 env[1215]: time="2025-07-14T22:10:48.814746046Z" level=error msg="encountered an error cleaning up failed sandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.814834 env[1215]: time="2025-07-14T22:10:48.814793166Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-86b44b5b85-vwhfb,Uid:52394d10-30d6-44c3-a9bb-9a8079034400,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.815280 kubelet[1999]: E0714 22:10:48.814965 1999 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.815280 kubelet[1999]: E0714 22:10:48.815023 1999 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-86b44b5b85-vwhfb" Jul 14 22:10:48.815280 kubelet[1999]: E0714 22:10:48.815042 1999 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-86b44b5b85-vwhfb" Jul 14 22:10:48.815432 kubelet[1999]: E0714 22:10:48.815086 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-86b44b5b85-vwhfb_calico-system(52394d10-30d6-44c3-a9bb-9a8079034400)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-86b44b5b85-vwhfb_calico-system(52394d10-30d6-44c3-a9bb-9a8079034400)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-86b44b5b85-vwhfb" podUID="52394d10-30d6-44c3-a9bb-9a8079034400" Jul 14 22:10:48.827172 env[1215]: time="2025-07-14T22:10:48.827109284Z" level=error msg="Failed to destroy network for sandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.827492 env[1215]: time="2025-07-14T22:10:48.827460084Z" level=error msg="encountered an error cleaning up failed sandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.827542 env[1215]: time="2025-07-14T22:10:48.827516924Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-4b2tn,Uid:e5244a42-16bb-47e0-a9b1-018b075643ee,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.828025 kubelet[1999]: E0714 22:10:48.827703 1999 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.828025 kubelet[1999]: E0714 22:10:48.827758 1999 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-4b2tn" Jul 14 22:10:48.828025 kubelet[1999]: E0714 22:10:48.827776 1999 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-4b2tn" Jul 14 22:10:48.828158 kubelet[1999]: E0714 22:10:48.827831 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-4b2tn_kube-system(e5244a42-16bb-47e0-a9b1-018b075643ee)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-4b2tn_kube-system(e5244a42-16bb-47e0-a9b1-018b075643ee)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-4b2tn" podUID="e5244a42-16bb-47e0-a9b1-018b075643ee" Jul 14 22:10:48.828389 env[1215]: time="2025-07-14T22:10:48.828328084Z" level=error msg="Failed to destroy network for sandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.828710 env[1215]: time="2025-07-14T22:10:48.828665924Z" level=error msg="encountered an error cleaning up failed sandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.828747 env[1215]: time="2025-07-14T22:10:48.828712403Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c87d7d578-msz9q,Uid:d8c1108b-9df8-49ba-a271-e4b581ab48a1,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.829007 kubelet[1999]: E0714 22:10:48.828871 1999 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:48.829007 kubelet[1999]: E0714 22:10:48.828915 1999 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7c87d7d578-msz9q" Jul 14 22:10:48.829007 kubelet[1999]: E0714 22:10:48.828930 1999 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7c87d7d578-msz9q" Jul 14 22:10:48.829138 kubelet[1999]: E0714 22:10:48.828956 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7c87d7d578-msz9q_calico-apiserver(d8c1108b-9df8-49ba-a271-e4b581ab48a1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7c87d7d578-msz9q_calico-apiserver(d8c1108b-9df8-49ba-a271-e4b581ab48a1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7c87d7d578-msz9q" podUID="d8c1108b-9df8-49ba-a271-e4b581ab48a1" Jul 14 22:10:49.230445 systemd[1]: Created slice kubepods-besteffort-podeef8fcaf_a4a7_424c_b65e_81db6db1c77a.slice. Jul 14 22:10:49.235258 env[1215]: time="2025-07-14T22:10:49.235213941Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7cvd9,Uid:eef8fcaf-a4a7-424c-b65e-81db6db1c77a,Namespace:calico-system,Attempt:0,}" Jul 14 22:10:49.303721 kubelet[1999]: I0714 22:10:49.303682 1999 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:10:49.309910 env[1215]: time="2025-07-14T22:10:49.305483971Z" level=info msg="StopPodSandbox for \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\"" Jul 14 22:10:49.311691 kubelet[1999]: I0714 22:10:49.311656 1999 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:10:49.312404 env[1215]: time="2025-07-14T22:10:49.312359610Z" level=info msg="StopPodSandbox for \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\"" Jul 14 22:10:49.315475 kubelet[1999]: I0714 22:10:49.315421 1999 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:10:49.315888 env[1215]: time="2025-07-14T22:10:49.315827649Z" level=info msg="StopPodSandbox for \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\"" Jul 14 22:10:49.318361 kubelet[1999]: I0714 22:10:49.318320 1999 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:10:49.318817 env[1215]: time="2025-07-14T22:10:49.318775209Z" level=info msg="StopPodSandbox for \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\"" Jul 14 22:10:49.322842 kubelet[1999]: I0714 22:10:49.321976 1999 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:10:49.323031 env[1215]: time="2025-07-14T22:10:49.322910128Z" level=info msg="StopPodSandbox for \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\"" Jul 14 22:10:49.326112 env[1215]: time="2025-07-14T22:10:49.325476448Z" level=error msg="Failed to destroy network for sandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:49.326424 kubelet[1999]: I0714 22:10:49.326054 1999 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:10:49.326483 env[1215]: time="2025-07-14T22:10:49.326157128Z" level=error msg="encountered an error cleaning up failed sandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:49.326483 env[1215]: time="2025-07-14T22:10:49.326203048Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7cvd9,Uid:eef8fcaf-a4a7-424c-b65e-81db6db1c77a,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:49.327060 env[1215]: time="2025-07-14T22:10:49.326662488Z" level=info msg="StopPodSandbox for \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\"" Jul 14 22:10:49.327419 kubelet[1999]: E0714 22:10:49.326852 1999 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:49.327419 kubelet[1999]: E0714 22:10:49.326942 1999 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-7cvd9" Jul 14 22:10:49.327419 kubelet[1999]: E0714 22:10:49.326963 1999 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-7cvd9" Jul 14 22:10:49.327781 kubelet[1999]: E0714 22:10:49.326996 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-7cvd9_calico-system(eef8fcaf-a4a7-424c-b65e-81db6db1c77a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-7cvd9_calico-system(eef8fcaf-a4a7-424c-b65e-81db6db1c77a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-7cvd9" podUID="eef8fcaf-a4a7-424c-b65e-81db6db1c77a" Jul 14 22:10:49.329496 kubelet[1999]: I0714 22:10:49.329468 1999 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:10:49.329960 env[1215]: time="2025-07-14T22:10:49.329926847Z" level=info msg="StopPodSandbox for \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\"" Jul 14 22:10:49.332691 kubelet[1999]: I0714 22:10:49.332535 1999 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:10:49.333367 env[1215]: time="2025-07-14T22:10:49.333236047Z" level=info msg="StopPodSandbox for \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\"" Jul 14 22:10:49.360506 env[1215]: time="2025-07-14T22:10:49.360431683Z" level=error msg="StopPodSandbox for \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\" failed" error="failed to destroy network for sandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:49.365656 kubelet[1999]: E0714 22:10:49.365027 1999 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:10:49.365656 kubelet[1999]: E0714 22:10:49.365194 1999 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7"} Jul 14 22:10:49.365656 kubelet[1999]: E0714 22:10:49.365575 1999 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"52394d10-30d6-44c3-a9bb-9a8079034400\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:10:49.365656 kubelet[1999]: E0714 22:10:49.365614 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"52394d10-30d6-44c3-a9bb-9a8079034400\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-86b44b5b85-vwhfb" podUID="52394d10-30d6-44c3-a9bb-9a8079034400" Jul 14 22:10:49.372804 env[1215]: time="2025-07-14T22:10:49.372714641Z" level=error msg="StopPodSandbox for \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\" failed" error="failed to destroy network for sandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:49.373105 kubelet[1999]: E0714 22:10:49.372952 1999 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:10:49.373105 kubelet[1999]: E0714 22:10:49.372996 1999 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562"} Jul 14 22:10:49.373105 kubelet[1999]: E0714 22:10:49.373032 1999 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c5224d5a-68ce-4d91-9c1a-81aee0017fc6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:10:49.373105 kubelet[1999]: E0714 22:10:49.373054 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c5224d5a-68ce-4d91-9c1a-81aee0017fc6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-z7ctx" podUID="c5224d5a-68ce-4d91-9c1a-81aee0017fc6" Jul 14 22:10:49.386991 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2-shm.mount: Deactivated successfully. Jul 14 22:10:49.387079 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7-shm.mount: Deactivated successfully. Jul 14 22:10:49.393538 env[1215]: time="2025-07-14T22:10:49.393482158Z" level=error msg="StopPodSandbox for \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\" failed" error="failed to destroy network for sandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:49.393902 kubelet[1999]: E0714 22:10:49.393745 1999 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:10:49.393902 kubelet[1999]: E0714 22:10:49.393804 1999 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99"} Jul 14 22:10:49.393902 kubelet[1999]: E0714 22:10:49.393846 1999 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6c50cb2a-3c39-4f9d-91d6-7f2c4d312652\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:10:49.393902 kubelet[1999]: E0714 22:10:49.393867 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6c50cb2a-3c39-4f9d-91d6-7f2c4d312652\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7c87d7d578-68hlv" podUID="6c50cb2a-3c39-4f9d-91d6-7f2c4d312652" Jul 14 22:10:49.417680 env[1215]: time="2025-07-14T22:10:49.417601194Z" level=error msg="StopPodSandbox for \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\" failed" error="failed to destroy network for sandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:49.417921 env[1215]: time="2025-07-14T22:10:49.417796954Z" level=error msg="StopPodSandbox for \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\" failed" error="failed to destroy network for sandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:49.418279 kubelet[1999]: E0714 22:10:49.418051 1999 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:10:49.418279 kubelet[1999]: E0714 22:10:49.418104 1999 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98"} Jul 14 22:10:49.418279 kubelet[1999]: E0714 22:10:49.418112 1999 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:10:49.418279 kubelet[1999]: E0714 22:10:49.418163 1999 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052"} Jul 14 22:10:49.418279 kubelet[1999]: E0714 22:10:49.418191 1999 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d8c1108b-9df8-49ba-a271-e4b581ab48a1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:10:49.419659 kubelet[1999]: E0714 22:10:49.418212 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d8c1108b-9df8-49ba-a271-e4b581ab48a1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7c87d7d578-msz9q" podUID="d8c1108b-9df8-49ba-a271-e4b581ab48a1" Jul 14 22:10:49.419659 kubelet[1999]: E0714 22:10:49.418138 1999 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b6800f40-1a9b-4489-93ca-766d5603dcc6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:10:49.419659 kubelet[1999]: E0714 22:10:49.418242 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b6800f40-1a9b-4489-93ca-766d5603dcc6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-vdc7j" podUID="b6800f40-1a9b-4489-93ca-766d5603dcc6" Jul 14 22:10:49.419808 env[1215]: time="2025-07-14T22:10:49.417880194Z" level=error msg="StopPodSandbox for \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\" failed" error="failed to destroy network for sandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:49.419963 env[1215]: time="2025-07-14T22:10:49.418671434Z" level=error msg="StopPodSandbox for \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\" failed" error="failed to destroy network for sandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:49.420024 kubelet[1999]: E0714 22:10:49.420006 1999 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:10:49.420059 kubelet[1999]: E0714 22:10:49.420032 1999 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857"} Jul 14 22:10:49.420088 kubelet[1999]: E0714 22:10:49.420058 1999 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e5244a42-16bb-47e0-a9b1-018b075643ee\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:10:49.420088 kubelet[1999]: E0714 22:10:49.420077 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e5244a42-16bb-47e0-a9b1-018b075643ee\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-4b2tn" podUID="e5244a42-16bb-47e0-a9b1-018b075643ee" Jul 14 22:10:49.420592 env[1215]: time="2025-07-14T22:10:49.420530954Z" level=error msg="StopPodSandbox for \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\" failed" error="failed to destroy network for sandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:49.421178 kubelet[1999]: E0714 22:10:49.420776 1999 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:10:49.421178 kubelet[1999]: E0714 22:10:49.420814 1999 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2"} Jul 14 22:10:49.421178 kubelet[1999]: E0714 22:10:49.420838 1999 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d74727d3-06bd-4249-8964-7a335825fdf9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:10:49.421178 kubelet[1999]: E0714 22:10:49.420902 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d74727d3-06bd-4249-8964-7a335825fdf9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-64bcf76967-h67vb" podUID="d74727d3-06bd-4249-8964-7a335825fdf9" Jul 14 22:10:49.421743 kubelet[1999]: E0714 22:10:49.420123 1999 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:10:49.421897 kubelet[1999]: E0714 22:10:49.421752 1999 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5"} Jul 14 22:10:49.421897 kubelet[1999]: E0714 22:10:49.421779 1999 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f5a3fd3e-f137-4577-886c-7cb3c9ae091a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:10:49.421897 kubelet[1999]: E0714 22:10:49.421797 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f5a3fd3e-f137-4577-886c-7cb3c9ae091a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6cfff6787d-9cqb9" podUID="f5a3fd3e-f137-4577-886c-7cb3c9ae091a" Jul 14 22:10:50.334950 kubelet[1999]: I0714 22:10:50.334905 1999 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:10:50.338460 env[1215]: time="2025-07-14T22:10:50.335583661Z" level=info msg="StopPodSandbox for \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\"" Jul 14 22:10:50.360402 env[1215]: time="2025-07-14T22:10:50.360325377Z" level=error msg="StopPodSandbox for \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\" failed" error="failed to destroy network for sandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:10:50.360885 kubelet[1999]: E0714 22:10:50.360749 1999 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:10:50.360885 kubelet[1999]: E0714 22:10:50.360798 1999 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539"} Jul 14 22:10:50.360885 kubelet[1999]: E0714 22:10:50.360834 1999 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"eef8fcaf-a4a7-424c-b65e-81db6db1c77a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:10:50.360885 kubelet[1999]: E0714 22:10:50.360854 1999 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"eef8fcaf-a4a7-424c-b65e-81db6db1c77a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-7cvd9" podUID="eef8fcaf-a4a7-424c-b65e-81db6db1c77a" Jul 14 22:10:53.470329 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1569883644.mount: Deactivated successfully. Jul 14 22:10:53.691923 env[1215]: time="2025-07-14T22:10:53.691862190Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:53.693908 env[1215]: time="2025-07-14T22:10:53.693859685Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:53.695988 env[1215]: time="2025-07-14T22:10:53.695808260Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:53.697227 env[1215]: time="2025-07-14T22:10:53.697125550Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:53.697597 env[1215]: time="2025-07-14T22:10:53.697562633Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 14 22:10:53.718089 env[1215]: time="2025-07-14T22:10:53.718022028Z" level=info msg="CreateContainer within sandbox \"c073f25a98389f4c80b04fe01088d8f2eeafd897780509b7748b47d844e548db\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 14 22:10:53.737277 env[1215]: time="2025-07-14T22:10:53.737171293Z" level=info msg="CreateContainer within sandbox \"c073f25a98389f4c80b04fe01088d8f2eeafd897780509b7748b47d844e548db\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"092d784c1f718a298558486a2f40b1f49aec3c3a1ea4844990a3b2e17649bce8\"" Jul 14 22:10:53.737786 env[1215]: time="2025-07-14T22:10:53.737745097Z" level=info msg="StartContainer for \"092d784c1f718a298558486a2f40b1f49aec3c3a1ea4844990a3b2e17649bce8\"" Jul 14 22:10:53.767982 systemd[1]: Started cri-containerd-092d784c1f718a298558486a2f40b1f49aec3c3a1ea4844990a3b2e17649bce8.scope. Jul 14 22:10:53.791000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.793972 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 14 22:10:53.794065 kernel: audit: type=1400 audit(1752531053.791:1014): avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.791000 audit[3248]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2492 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:53.800139 kernel: audit: type=1300 audit(1752531053.791:1014): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2492 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:53.800216 kernel: audit: type=1327 audit(1752531053.791:1014): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039326437383463316637313861323938353538343836613266343062 Jul 14 22:10:53.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039326437383463316637313861323938353538343836613266343062 Jul 14 22:10:53.791000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.805822 kernel: audit: type=1400 audit(1752531053.791:1015): avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.805895 kernel: audit: type=1400 audit(1752531053.791:1015): avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.791000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.791000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.811279 kernel: audit: type=1400 audit(1752531053.791:1015): avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.791000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.813776 kernel: audit: type=1400 audit(1752531053.791:1015): avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.791000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.816459 kernel: audit: type=1400 audit(1752531053.791:1015): avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.816524 kernel: audit: type=1400 audit(1752531053.791:1015): avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.791000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.791000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.821234 kernel: audit: type=1400 audit(1752531053.791:1015): avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.791000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.791000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.791000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.791000 audit: BPF prog-id=133 op=LOAD Jul 14 22:10:53.791000 audit[3248]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2492 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:53.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039326437383463316637313861323938353538343836613266343062 Jul 14 22:10:53.792000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.792000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.792000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.792000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.792000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.792000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.792000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.792000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.792000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.792000 audit: BPF prog-id=134 op=LOAD Jul 14 22:10:53.792000 audit[3248]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2492 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:53.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039326437383463316637313861323938353538343836613266343062 Jul 14 22:10:53.795000 audit: BPF prog-id=134 op=UNLOAD Jul 14 22:10:53.795000 audit: BPF prog-id=133 op=UNLOAD Jul 14 22:10:53.795000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.795000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.795000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.795000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.795000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.795000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.795000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.795000 audit[3248]: AVC avc: denied { perfmon } for pid=3248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.795000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.795000 audit[3248]: AVC avc: denied { bpf } for pid=3248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:53.795000 audit: BPF prog-id=135 op=LOAD Jul 14 22:10:53.795000 audit[3248]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2492 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:53.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039326437383463316637313861323938353538343836613266343062 Jul 14 22:10:53.823108 env[1215]: time="2025-07-14T22:10:53.822897901Z" level=info msg="StartContainer for \"092d784c1f718a298558486a2f40b1f49aec3c3a1ea4844990a3b2e17649bce8\" returns successfully" Jul 14 22:10:54.012919 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 14 22:10:54.013044 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 14 22:10:54.120589 env[1215]: time="2025-07-14T22:10:54.120541207Z" level=info msg="StopPodSandbox for \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\"" Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.258 [INFO][3305] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.258 [INFO][3305] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" iface="eth0" netns="/var/run/netns/cni-f1b5feae-4309-fea3-2c15-82992bb26f04" Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.259 [INFO][3305] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" iface="eth0" netns="/var/run/netns/cni-f1b5feae-4309-fea3-2c15-82992bb26f04" Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.260 [INFO][3305] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" iface="eth0" netns="/var/run/netns/cni-f1b5feae-4309-fea3-2c15-82992bb26f04" Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.260 [INFO][3305] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.260 [INFO][3305] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.371 [INFO][3316] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" HandleID="k8s-pod-network.8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Workload="localhost-k8s-whisker--86b44b5b85--vwhfb-eth0" Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.371 [INFO][3316] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.371 [INFO][3316] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.385 [WARNING][3316] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" HandleID="k8s-pod-network.8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Workload="localhost-k8s-whisker--86b44b5b85--vwhfb-eth0" Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.385 [INFO][3316] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" HandleID="k8s-pod-network.8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Workload="localhost-k8s-whisker--86b44b5b85--vwhfb-eth0" Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.387 [INFO][3316] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:10:54.394835 env[1215]: 2025-07-14 22:10:54.389 [INFO][3305] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:10:54.396133 env[1215]: time="2025-07-14T22:10:54.395045626Z" level=info msg="TearDown network for sandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\" successfully" Jul 14 22:10:54.396133 env[1215]: time="2025-07-14T22:10:54.395075586Z" level=info msg="StopPodSandbox for \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\" returns successfully" Jul 14 22:10:54.471269 systemd[1]: run-netns-cni\x2df1b5feae\x2d4309\x2dfea3\x2d2c15\x2d82992bb26f04.mount: Deactivated successfully. Jul 14 22:10:54.595254 kubelet[1999]: I0714 22:10:54.595198 1999 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-n77kl\" (UniqueName: \"kubernetes.io/projected/52394d10-30d6-44c3-a9bb-9a8079034400-kube-api-access-n77kl\") pod \"52394d10-30d6-44c3-a9bb-9a8079034400\" (UID: \"52394d10-30d6-44c3-a9bb-9a8079034400\") " Jul 14 22:10:54.595254 kubelet[1999]: I0714 22:10:54.595252 1999 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/52394d10-30d6-44c3-a9bb-9a8079034400-whisker-ca-bundle\") pod \"52394d10-30d6-44c3-a9bb-9a8079034400\" (UID: \"52394d10-30d6-44c3-a9bb-9a8079034400\") " Jul 14 22:10:54.595682 kubelet[1999]: I0714 22:10:54.595279 1999 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/52394d10-30d6-44c3-a9bb-9a8079034400-whisker-backend-key-pair\") pod \"52394d10-30d6-44c3-a9bb-9a8079034400\" (UID: \"52394d10-30d6-44c3-a9bb-9a8079034400\") " Jul 14 22:10:54.595827 kubelet[1999]: I0714 22:10:54.595722 1999 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/52394d10-30d6-44c3-a9bb-9a8079034400-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "52394d10-30d6-44c3-a9bb-9a8079034400" (UID: "52394d10-30d6-44c3-a9bb-9a8079034400"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 14 22:10:54.604332 systemd[1]: var-lib-kubelet-pods-52394d10\x2d30d6\x2d44c3\x2da9bb\x2d9a8079034400-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 14 22:10:54.606828 systemd[1]: var-lib-kubelet-pods-52394d10\x2d30d6\x2d44c3\x2da9bb\x2d9a8079034400-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dn77kl.mount: Deactivated successfully. Jul 14 22:10:54.607696 kubelet[1999]: I0714 22:10:54.607659 1999 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/52394d10-30d6-44c3-a9bb-9a8079034400-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "52394d10-30d6-44c3-a9bb-9a8079034400" (UID: "52394d10-30d6-44c3-a9bb-9a8079034400"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 14 22:10:54.607983 kubelet[1999]: I0714 22:10:54.607937 1999 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/52394d10-30d6-44c3-a9bb-9a8079034400-kube-api-access-n77kl" (OuterVolumeSpecName: "kube-api-access-n77kl") pod "52394d10-30d6-44c3-a9bb-9a8079034400" (UID: "52394d10-30d6-44c3-a9bb-9a8079034400"). InnerVolumeSpecName "kube-api-access-n77kl". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 14 22:10:54.695865 kubelet[1999]: I0714 22:10:54.695754 1999 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-n77kl\" (UniqueName: \"kubernetes.io/projected/52394d10-30d6-44c3-a9bb-9a8079034400-kube-api-access-n77kl\") on node \"localhost\" DevicePath \"\"" Jul 14 22:10:54.695865 kubelet[1999]: I0714 22:10:54.695785 1999 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/52394d10-30d6-44c3-a9bb-9a8079034400-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 14 22:10:54.695865 kubelet[1999]: I0714 22:10:54.695794 1999 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/52394d10-30d6-44c3-a9bb-9a8079034400-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 14 22:10:55.354093 systemd[1]: Removed slice kubepods-besteffort-pod52394d10_30d6_44c3_a9bb_9a8079034400.slice. Jul 14 22:10:55.373971 kubelet[1999]: I0714 22:10:55.373908 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-9bhg7" podStartSLOduration=2.95947674 podStartE2EDuration="15.373890027s" podCreationTimestamp="2025-07-14 22:10:40 +0000 UTC" firstStartedPulling="2025-07-14 22:10:41.284257595 +0000 UTC m=+25.158640325" lastFinishedPulling="2025-07-14 22:10:53.698670882 +0000 UTC m=+37.573053612" observedRunningTime="2025-07-14 22:10:54.364979844 +0000 UTC m=+38.239362575" watchObservedRunningTime="2025-07-14 22:10:55.373890027 +0000 UTC m=+39.248272717" Jul 14 22:10:55.425631 systemd[1]: Created slice kubepods-besteffort-pod731ce5c4_a7d3_4871_8d3f_f18460b93257.slice. Jul 14 22:10:55.465000 audit[3447]: AVC avc: denied { write } for pid=3447 comm="tee" name="fd" dev="proc" ino=18933 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:10:55.465000 audit[3447]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffce737e5 a2=241 a3=1b6 items=1 ppid=3406 pid=3447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.465000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 14 22:10:55.465000 audit: PATH item=0 name="/dev/fd/63" inode=18417 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:10:55.465000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:10:55.470559 systemd[1]: run-containerd-runc-k8s.io-092d784c1f718a298558486a2f40b1f49aec3c3a1ea4844990a3b2e17649bce8-runc.TOhDjF.mount: Deactivated successfully. Jul 14 22:10:55.472000 audit[3441]: AVC avc: denied { write } for pid=3441 comm="tee" name="fd" dev="proc" ino=18940 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:10:55.472000 audit[3441]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdbb5d7d5 a2=241 a3=1b6 items=1 ppid=3390 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.472000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 14 22:10:55.472000 audit: PATH item=0 name="/dev/fd/63" inode=18416 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:10:55.472000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:10:55.483000 audit[3431]: AVC avc: denied { write } for pid=3431 comm="tee" name="fd" dev="proc" ino=19824 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:10:55.483000 audit[3431]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe01627e5 a2=241 a3=1b6 items=1 ppid=3401 pid=3431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.483000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 14 22:10:55.483000 audit: PATH item=0 name="/dev/fd/63" inode=20850 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:10:55.483000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:10:55.502000 audit[3455]: AVC avc: denied { write } for pid=3455 comm="tee" name="fd" dev="proc" ino=19830 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:10:55.502000 audit[3455]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff69457e6 a2=241 a3=1b6 items=1 ppid=3408 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.502000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 14 22:10:55.502000 audit: PATH item=0 name="/dev/fd/63" inode=18937 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:10:55.502000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:10:55.540000 audit[3471]: AVC avc: denied { write } for pid=3471 comm="tee" name="fd" dev="proc" ino=21506 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:10:55.540000 audit[3471]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffeec967e7 a2=241 a3=1b6 items=1 ppid=3396 pid=3471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.540000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 14 22:10:55.540000 audit: PATH item=0 name="/dev/fd/63" inode=18428 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:10:55.540000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:10:55.541000 audit[3472]: AVC avc: denied { write } for pid=3472 comm="tee" name="fd" dev="proc" ino=20858 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:10:55.541000 audit[3472]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd5cf37e5 a2=241 a3=1b6 items=1 ppid=3394 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.541000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 14 22:10:55.541000 audit: PATH item=0 name="/dev/fd/63" inode=20855 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:10:55.541000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:10:55.545000 audit[3474]: AVC avc: denied { write } for pid=3474 comm="tee" name="fd" dev="proc" ino=21511 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:10:55.545000 audit[3474]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff08177d6 a2=241 a3=1b6 items=1 ppid=3402 pid=3474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.545000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 14 22:10:55.545000 audit: PATH item=0 name="/dev/fd/63" inode=18431 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:10:55.545000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:10:55.600914 kubelet[1999]: I0714 22:10:55.600873 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/731ce5c4-a7d3-4871-8d3f-f18460b93257-whisker-backend-key-pair\") pod \"whisker-b5685c7c9-2f6dl\" (UID: \"731ce5c4-a7d3-4871-8d3f-f18460b93257\") " pod="calico-system/whisker-b5685c7c9-2f6dl" Jul 14 22:10:55.601364 kubelet[1999]: I0714 22:10:55.601343 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/731ce5c4-a7d3-4871-8d3f-f18460b93257-whisker-ca-bundle\") pod \"whisker-b5685c7c9-2f6dl\" (UID: \"731ce5c4-a7d3-4871-8d3f-f18460b93257\") " pod="calico-system/whisker-b5685c7c9-2f6dl" Jul 14 22:10:55.601490 kubelet[1999]: I0714 22:10:55.601474 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2m2sj\" (UniqueName: \"kubernetes.io/projected/731ce5c4-a7d3-4871-8d3f-f18460b93257-kube-api-access-2m2sj\") pod \"whisker-b5685c7c9-2f6dl\" (UID: \"731ce5c4-a7d3-4871-8d3f-f18460b93257\") " pod="calico-system/whisker-b5685c7c9-2f6dl" Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { bpf } for pid=3509 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { bpf } for pid=3509 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { bpf } for pid=3509 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { bpf } for pid=3509 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit: BPF prog-id=136 op=LOAD Jul 14 22:10:55.640000 audit[3509]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd8a53c38 a2=98 a3=ffffd8a53c28 items=0 ppid=3397 pid=3509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.640000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 22:10:55.640000 audit: BPF prog-id=136 op=UNLOAD Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { bpf } for pid=3509 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { bpf } for pid=3509 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { bpf } for pid=3509 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { bpf } for pid=3509 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit: BPF prog-id=137 op=LOAD Jul 14 22:10:55.640000 audit[3509]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd8a53ae8 a2=74 a3=95 items=0 ppid=3397 pid=3509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.640000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 22:10:55.640000 audit: BPF prog-id=137 op=UNLOAD Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { bpf } for pid=3509 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { bpf } for pid=3509 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { bpf } for pid=3509 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { bpf } for pid=3509 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit: BPF prog-id=138 op=LOAD Jul 14 22:10:55.640000 audit[3509]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd8a53b18 a2=40 a3=ffffd8a53b48 items=0 ppid=3397 pid=3509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.640000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 22:10:55.640000 audit: BPF prog-id=138 op=UNLOAD Jul 14 22:10:55.640000 audit[3509]: AVC avc: denied { perfmon } for pid=3509 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.640000 audit[3509]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd8a53c30 a2=50 a3=0 items=0 ppid=3397 pid=3509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.640000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit: BPF prog-id=139 op=LOAD Jul 14 22:10:55.643000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffce3a66d8 a2=98 a3=ffffce3a66c8 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.643000 audit: BPF prog-id=139 op=UNLOAD Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit: BPF prog-id=140 op=LOAD Jul 14 22:10:55.643000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffce3a6368 a2=74 a3=95 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.643000 audit: BPF prog-id=140 op=UNLOAD Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.643000 audit: BPF prog-id=141 op=LOAD Jul 14 22:10:55.643000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffce3a63c8 a2=94 a3=2 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.643000 audit: BPF prog-id=141 op=UNLOAD Jul 14 22:10:55.731919 env[1215]: time="2025-07-14T22:10:55.731867907Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-b5685c7c9-2f6dl,Uid:731ce5c4-a7d3-4871-8d3f-f18460b93257,Namespace:calico-system,Attempt:0,}" Jul 14 22:10:55.738000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.738000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.738000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.738000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.738000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.738000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.738000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.738000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.738000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.738000 audit: BPF prog-id=142 op=LOAD Jul 14 22:10:55.738000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffce3a6388 a2=40 a3=ffffce3a63b8 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.738000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.738000 audit: BPF prog-id=142 op=UNLOAD Jul 14 22:10:55.738000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.738000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffce3a64a0 a2=50 a3=0 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.738000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.746000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.746000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffce3a63f8 a2=28 a3=ffffce3a6528 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.746000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffce3a6428 a2=28 a3=ffffce3a6558 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffce3a62d8 a2=28 a3=ffffce3a6408 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffce3a6448 a2=28 a3=ffffce3a6578 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffce3a6428 a2=28 a3=ffffce3a6558 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffce3a6418 a2=28 a3=ffffce3a6548 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffce3a6448 a2=28 a3=ffffce3a6578 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffce3a6428 a2=28 a3=ffffce3a6558 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffce3a6448 a2=28 a3=ffffce3a6578 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffce3a6418 a2=28 a3=ffffce3a6548 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffce3a6498 a2=28 a3=ffffce3a65d8 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffce3a61d0 a2=50 a3=0 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit: BPF prog-id=143 op=LOAD Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffce3a61d8 a2=94 a3=5 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit: BPF prog-id=143 op=UNLOAD Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffce3a62e0 a2=50 a3=0 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffce3a6428 a2=4 a3=3 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.747000 audit[3510]: AVC avc: denied { confidentiality } for pid=3510 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:10:55.747000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffce3a6408 a2=94 a3=6 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { confidentiality } for pid=3510 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:10:55.748000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffce3a5bd8 a2=94 a3=83 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.748000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.748000 audit[3510]: AVC avc: denied { confidentiality } for pid=3510 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:10:55.748000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffce3a5bd8 a2=94 a3=83 items=0 ppid=3397 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.748000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit: BPF prog-id=144 op=LOAD Jul 14 22:10:55.761000 audit[3515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffa67f4e8 a2=98 a3=fffffa67f4d8 items=0 ppid=3397 pid=3515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.761000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 22:10:55.761000 audit: BPF prog-id=144 op=UNLOAD Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit: BPF prog-id=145 op=LOAD Jul 14 22:10:55.761000 audit[3515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffa67f398 a2=74 a3=95 items=0 ppid=3397 pid=3515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.761000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 22:10:55.761000 audit: BPF prog-id=145 op=UNLOAD Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.761000 audit: BPF prog-id=146 op=LOAD Jul 14 22:10:55.761000 audit[3515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffa67f3c8 a2=40 a3=fffffa67f3f8 items=0 ppid=3397 pid=3515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.761000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 22:10:55.761000 audit: BPF prog-id=146 op=UNLOAD Jul 14 22:10:55.840172 systemd-networkd[1046]: vxlan.calico: Link UP Jul 14 22:10:55.840178 systemd-networkd[1046]: vxlan.calico: Gained carrier Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit: BPF prog-id=147 op=LOAD Jul 14 22:10:55.864000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff9da4878 a2=98 a3=fffff9da4868 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.864000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.864000 audit: BPF prog-id=147 op=UNLOAD Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit: BPF prog-id=148 op=LOAD Jul 14 22:10:55.864000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff9da4558 a2=74 a3=95 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.864000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.864000 audit: BPF prog-id=148 op=UNLOAD Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.864000 audit: BPF prog-id=149 op=LOAD Jul 14 22:10:55.864000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff9da45b8 a2=94 a3=2 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.864000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit: BPF prog-id=149 op=UNLOAD Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff9da45e8 a2=28 a3=fffff9da4718 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff9da4618 a2=28 a3=fffff9da4748 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff9da44c8 a2=28 a3=fffff9da45f8 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff9da4638 a2=28 a3=fffff9da4768 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff9da4618 a2=28 a3=fffff9da4748 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff9da4608 a2=28 a3=fffff9da4738 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff9da4638 a2=28 a3=fffff9da4768 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff9da4618 a2=28 a3=fffff9da4748 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff9da4638 a2=28 a3=fffff9da4768 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff9da4608 a2=28 a3=fffff9da4738 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff9da4688 a2=28 a3=fffff9da47c8 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff9da44a8 a2=40 a3=fffff9da44d8 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit: BPF prog-id=150 op=UNLOAD Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=fffff9da44d0 a2=50 a3=0 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=fffff9da44d0 a2=50 a3=0 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit: BPF prog-id=151 op=LOAD Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff9da3c38 a2=94 a3=2 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.866000 audit: BPF prog-id=151 op=UNLOAD Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.866000 audit: BPF prog-id=152 op=LOAD Jul 14 22:10:55.866000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff9da3dc8 a2=94 a3=30 items=0 ppid=3397 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.866000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:10:55.869000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.869000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.869000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.869000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.869000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.869000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.869000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.869000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.869000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.869000 audit: BPF prog-id=153 op=LOAD Jul 14 22:10:55.869000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffda2449e8 a2=98 a3=ffffda2449d8 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.869000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.869000 audit: BPF prog-id=153 op=UNLOAD Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit: BPF prog-id=154 op=LOAD Jul 14 22:10:55.870000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffda244678 a2=74 a3=95 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.870000 audit: BPF prog-id=154 op=UNLOAD Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.870000 audit: BPF prog-id=155 op=LOAD Jul 14 22:10:55.870000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffda2446d8 a2=94 a3=2 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.870000 audit: BPF prog-id=155 op=UNLOAD Jul 14 22:10:55.937920 systemd-networkd[1046]: cali9ea6e029fd7: Link UP Jul 14 22:10:55.941076 systemd-networkd[1046]: cali9ea6e029fd7: Gained carrier Jul 14 22:10:55.941548 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9ea6e029fd7: link becomes ready Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.846 [INFO][3527] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--b5685c7c9--2f6dl-eth0 whisker-b5685c7c9- calico-system 731ce5c4-a7d3-4871-8d3f-f18460b93257 964 0 2025-07-14 22:10:55 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:b5685c7c9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-b5685c7c9-2f6dl eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali9ea6e029fd7 [] [] }} ContainerID="a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" Namespace="calico-system" Pod="whisker-b5685c7c9-2f6dl" WorkloadEndpoint="localhost-k8s-whisker--b5685c7c9--2f6dl-" Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.847 [INFO][3527] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" Namespace="calico-system" Pod="whisker-b5685c7c9-2f6dl" WorkloadEndpoint="localhost-k8s-whisker--b5685c7c9--2f6dl-eth0" Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.887 [INFO][3552] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" HandleID="k8s-pod-network.a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" Workload="localhost-k8s-whisker--b5685c7c9--2f6dl-eth0" Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.887 [INFO][3552] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" HandleID="k8s-pod-network.a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" Workload="localhost-k8s-whisker--b5685c7c9--2f6dl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400052aa40), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-b5685c7c9-2f6dl", "timestamp":"2025-07-14 22:10:55.887169257 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.887 [INFO][3552] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.887 [INFO][3552] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.887 [INFO][3552] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.901 [INFO][3552] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" host="localhost" Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.910 [INFO][3552] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.917 [INFO][3552] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.919 [INFO][3552] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.921 [INFO][3552] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.921 [INFO][3552] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" host="localhost" Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.922 [INFO][3552] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9 Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.926 [INFO][3552] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" host="localhost" Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.932 [INFO][3552] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" host="localhost" Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.932 [INFO][3552] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" host="localhost" Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.932 [INFO][3552] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:10:55.958506 env[1215]: 2025-07-14 22:10:55.933 [INFO][3552] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" HandleID="k8s-pod-network.a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" Workload="localhost-k8s-whisker--b5685c7c9--2f6dl-eth0" Jul 14 22:10:55.959063 env[1215]: 2025-07-14 22:10:55.935 [INFO][3527] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" Namespace="calico-system" Pod="whisker-b5685c7c9-2f6dl" WorkloadEndpoint="localhost-k8s-whisker--b5685c7c9--2f6dl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--b5685c7c9--2f6dl-eth0", GenerateName:"whisker-b5685c7c9-", Namespace:"calico-system", SelfLink:"", UID:"731ce5c4-a7d3-4871-8d3f-f18460b93257", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"b5685c7c9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-b5685c7c9-2f6dl", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali9ea6e029fd7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:10:55.959063 env[1215]: 2025-07-14 22:10:55.935 [INFO][3527] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" Namespace="calico-system" Pod="whisker-b5685c7c9-2f6dl" WorkloadEndpoint="localhost-k8s-whisker--b5685c7c9--2f6dl-eth0" Jul 14 22:10:55.959063 env[1215]: 2025-07-14 22:10:55.935 [INFO][3527] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9ea6e029fd7 ContainerID="a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" Namespace="calico-system" Pod="whisker-b5685c7c9-2f6dl" WorkloadEndpoint="localhost-k8s-whisker--b5685c7c9--2f6dl-eth0" Jul 14 22:10:55.959063 env[1215]: 2025-07-14 22:10:55.943 [INFO][3527] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" Namespace="calico-system" Pod="whisker-b5685c7c9-2f6dl" WorkloadEndpoint="localhost-k8s-whisker--b5685c7c9--2f6dl-eth0" Jul 14 22:10:55.959063 env[1215]: 2025-07-14 22:10:55.944 [INFO][3527] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" Namespace="calico-system" Pod="whisker-b5685c7c9-2f6dl" WorkloadEndpoint="localhost-k8s-whisker--b5685c7c9--2f6dl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--b5685c7c9--2f6dl-eth0", GenerateName:"whisker-b5685c7c9-", Namespace:"calico-system", SelfLink:"", UID:"731ce5c4-a7d3-4871-8d3f-f18460b93257", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"b5685c7c9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9", Pod:"whisker-b5685c7c9-2f6dl", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali9ea6e029fd7", MAC:"e6:3d:f1:53:0d:b1", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:10:55.959063 env[1215]: 2025-07-14 22:10:55.952 [INFO][3527] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9" Namespace="calico-system" Pod="whisker-b5685c7c9-2f6dl" WorkloadEndpoint="localhost-k8s-whisker--b5685c7c9--2f6dl-eth0" Jul 14 22:10:55.968033 env[1215]: time="2025-07-14T22:10:55.967954835Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:10:55.968033 env[1215]: time="2025-07-14T22:10:55.967996035Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:10:55.968033 env[1215]: time="2025-07-14T22:10:55.968006755Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:10:55.968442 env[1215]: time="2025-07-14T22:10:55.968402798Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9 pid=3588 runtime=io.containerd.runc.v2 Jul 14 22:10:55.970000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.970000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.970000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.970000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.970000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.970000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.970000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.970000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.970000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.970000 audit: BPF prog-id=156 op=LOAD Jul 14 22:10:55.970000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffda244698 a2=40 a3=ffffda2446c8 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.970000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.970000 audit: BPF prog-id=156 op=UNLOAD Jul 14 22:10:55.970000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.970000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffda2447b0 a2=50 a3=0 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.970000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffda244708 a2=28 a3=ffffda244838 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffda244738 a2=28 a3=ffffda244868 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffda2445e8 a2=28 a3=ffffda244718 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffda244758 a2=28 a3=ffffda244888 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffda244738 a2=28 a3=ffffda244868 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffda244728 a2=28 a3=ffffda244858 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffda244758 a2=28 a3=ffffda244888 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffda244738 a2=28 a3=ffffda244868 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffda244758 a2=28 a3=ffffda244888 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffda244728 a2=28 a3=ffffda244858 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffda2447a8 a2=28 a3=ffffda2448e8 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffda2444e0 a2=50 a3=0 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit: BPF prog-id=157 op=LOAD Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffda2444e8 a2=94 a3=5 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit: BPF prog-id=157 op=UNLOAD Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffda2445f0 a2=50 a3=0 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffda244738 a2=4 a3=3 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.979000 audit[3566]: AVC avc: denied { confidentiality } for pid=3566 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:10:55.979000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffda244718 a2=94 a3=6 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.979000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.983045 systemd[1]: Started cri-containerd-a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9.scope. Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { confidentiality } for pid=3566 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:10:55.981000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffda243ee8 a2=94 a3=83 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.981000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { confidentiality } for pid=3566 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:10:55.981000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffda243ee8 a2=94 a3=83 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.981000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffda245928 a2=10 a3=ffffda245a18 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.981000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffda2457e8 a2=10 a3=ffffda2458d8 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.981000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffda245758 a2=10 a3=ffffda2458d8 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.981000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.981000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:55.981000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffda245758 a2=10 a3=ffffda2458d8 items=0 ppid=3397 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:55.981000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:10:55.993000 audit: BPF prog-id=152 op=UNLOAD Jul 14 22:10:56.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit: BPF prog-id=158 op=LOAD Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=3588 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:56.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133666231303331663466626336643966393566343833383465373166 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3588 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:56.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133666231303331663466626336643966393566343833383465373166 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit: BPF prog-id=159 op=LOAD Jul 14 22:10:56.032000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=3588 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:56.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133666231303331663466626336643966393566343833383465373166 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit: BPF prog-id=160 op=LOAD Jul 14 22:10:56.032000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=3588 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:56.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133666231303331663466626336643966393566343833383465373166 Jul 14 22:10:56.032000 audit: BPF prog-id=160 op=UNLOAD Jul 14 22:10:56.032000 audit: BPF prog-id=159 op=UNLOAD Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:56.032000 audit: BPF prog-id=161 op=LOAD Jul 14 22:10:56.032000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=3588 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:56.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133666231303331663466626336643966393566343833383465373166 Jul 14 22:10:56.034822 systemd-resolved[1153]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:10:56.051100 env[1215]: time="2025-07-14T22:10:56.051048579Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-b5685c7c9-2f6dl,Uid:731ce5c4-a7d3-4871-8d3f-f18460b93257,Namespace:calico-system,Attempt:0,} returns sandbox id \"a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9\"" Jul 14 22:10:56.053912 env[1215]: time="2025-07-14T22:10:56.052610590Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 14 22:10:56.062000 audit[3644]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3644 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:10:56.062000 audit[3644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffe10c21c0 a2=0 a3=ffffa12ecfa8 items=0 ppid=3397 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:56.062000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:10:56.067000 audit[3643]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3643 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:10:56.067000 audit[3643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffc717f540 a2=0 a3=ffff95360fa8 items=0 ppid=3397 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:56.067000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:10:56.069000 audit[3646]: NETFILTER_CFG table=filter:103 family=2 entries=39 op=nft_register_chain pid=3646 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:10:56.069000 audit[3646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18968 a0=3 a1=ffffc8ae88b0 a2=0 a3=ffff9af38fa8 items=0 ppid=3397 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:56.069000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:10:56.070000 audit[3642]: NETFILTER_CFG table=raw:104 family=2 entries=21 op=nft_register_chain pid=3642 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:10:56.070000 audit[3642]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffff553bd90 a2=0 a3=ffff807a4fa8 items=0 ppid=3397 pid=3642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:56.070000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:10:56.095000 audit[3656]: NETFILTER_CFG table=filter:105 family=2 entries=59 op=nft_register_chain pid=3656 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:10:56.095000 audit[3656]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=35860 a0=3 a1=ffffdabd9f70 a2=0 a3=ffffa3eaafa8 items=0 ppid=3397 pid=3656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:56.095000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:10:56.228245 kubelet[1999]: I0714 22:10:56.228153 1999 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="52394d10-30d6-44c3-a9bb-9a8079034400" path="/var/lib/kubelet/pods/52394d10-30d6-44c3-a9bb-9a8079034400/volumes" Jul 14 22:10:57.456577 env[1215]: time="2025-07-14T22:10:57.455413858Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:57.458201 env[1215]: time="2025-07-14T22:10:57.457437752Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:57.460331 env[1215]: time="2025-07-14T22:10:57.459274245Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:57.460588 env[1215]: time="2025-07-14T22:10:57.460560413Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:57.461037 env[1215]: time="2025-07-14T22:10:57.461002856Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 14 22:10:57.464776 env[1215]: time="2025-07-14T22:10:57.464743042Z" level=info msg="CreateContainer within sandbox \"a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 14 22:10:57.481569 env[1215]: time="2025-07-14T22:10:57.481527955Z" level=info msg="CreateContainer within sandbox \"a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"26ba17b3efbd55f4e35670d12741b485774aa65b0c649ce0e8bddd005dee1210\"" Jul 14 22:10:57.483799 env[1215]: time="2025-07-14T22:10:57.482551602Z" level=info msg="StartContainer for \"26ba17b3efbd55f4e35670d12741b485774aa65b0c649ce0e8bddd005dee1210\"" Jul 14 22:10:57.510014 systemd[1]: Started cri-containerd-26ba17b3efbd55f4e35670d12741b485774aa65b0c649ce0e8bddd005dee1210.scope. Jul 14 22:10:57.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.544000 audit: BPF prog-id=162 op=LOAD Jul 14 22:10:57.544000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.544000 audit[3672]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=3588 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:57.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236626131376233656662643535663465333536373064313237343162 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3588 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:57.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236626131376233656662643535663465333536373064313237343162 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit: BPF prog-id=163 op=LOAD Jul 14 22:10:57.545000 audit[3672]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=3588 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:57.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236626131376233656662643535663465333536373064313237343162 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit: BPF prog-id=164 op=LOAD Jul 14 22:10:57.545000 audit[3672]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=3588 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:57.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236626131376233656662643535663465333536373064313237343162 Jul 14 22:10:57.545000 audit: BPF prog-id=164 op=UNLOAD Jul 14 22:10:57.545000 audit: BPF prog-id=163 op=UNLOAD Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:57.545000 audit: BPF prog-id=165 op=LOAD Jul 14 22:10:57.545000 audit[3672]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=3588 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:57.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236626131376233656662643535663465333536373064313237343162 Jul 14 22:10:57.570776 env[1215]: time="2025-07-14T22:10:57.570719798Z" level=info msg="StartContainer for \"26ba17b3efbd55f4e35670d12741b485774aa65b0c649ce0e8bddd005dee1210\" returns successfully" Jul 14 22:10:57.573079 env[1215]: time="2025-07-14T22:10:57.573051014Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 14 22:10:57.591000 audit[3683]: AVC avc: denied { search } for pid=3683 comm="nginx" name="crypto" dev="proc" ino=19249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c629,c675 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 14 22:10:57.591000 audit[3683]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffb4b5b958 a2=0 a3=0 items=0 ppid=3588 pid=3683 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c629,c675 key=(null) Jul 14 22:10:57.591000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 14 22:10:57.722303 systemd-networkd[1046]: cali9ea6e029fd7: Gained IPv6LL Jul 14 22:10:57.848494 systemd-networkd[1046]: vxlan.calico: Gained IPv6LL Jul 14 22:10:59.297320 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3441287557.mount: Deactivated successfully. Jul 14 22:10:59.333159 env[1215]: time="2025-07-14T22:10:59.333090333Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:59.335870 env[1215]: time="2025-07-14T22:10:59.335835431Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:59.337481 env[1215]: time="2025-07-14T22:10:59.337443281Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:59.338898 env[1215]: time="2025-07-14T22:10:59.338811690Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:10:59.339473 env[1215]: time="2025-07-14T22:10:59.339435134Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 14 22:10:59.342810 env[1215]: time="2025-07-14T22:10:59.341932870Z" level=info msg="CreateContainer within sandbox \"a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 14 22:10:59.358999 env[1215]: time="2025-07-14T22:10:59.358932099Z" level=info msg="CreateContainer within sandbox \"a3fb1031f4fbc6d9f95f48384e71f05ec98fe0de4ff419f4b2601a527e5246d9\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"32bf6c8882161d3c309a9c08e1360d94209eac27f90ec52df6dfa198d9c0f590\"" Jul 14 22:10:59.360876 env[1215]: time="2025-07-14T22:10:59.359477462Z" level=info msg="StartContainer for \"32bf6c8882161d3c309a9c08e1360d94209eac27f90ec52df6dfa198d9c0f590\"" Jul 14 22:10:59.380847 systemd[1]: Started cri-containerd-32bf6c8882161d3c309a9c08e1360d94209eac27f90ec52df6dfa198d9c0f590.scope. Jul 14 22:10:59.426191 kernel: kauditd_printk_skb: 714 callbacks suppressed Jul 14 22:10:59.426364 kernel: audit: type=1400 audit(1752531059.416:1167): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.426627 kernel: audit: type=1400 audit(1752531059.416:1168): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.426676 kernel: audit: type=1400 audit(1752531059.416:1169): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.429635 kernel: audit: type=1400 audit(1752531059.416:1170): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.432239 kernel: audit: type=1400 audit(1752531059.416:1171): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.434809 kernel: audit: type=1400 audit(1752531059.416:1172): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.434882 kernel: audit: type=1400 audit(1752531059.416:1173): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.439693 kernel: audit: type=1400 audit(1752531059.416:1174): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.442193 kernel: audit: type=1400 audit(1752531059.416:1175): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.442262 kernel: audit: type=1400 audit(1752531059.417:1176): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit: BPF prog-id=166 op=LOAD Jul 14 22:10:59.417000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit[3711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3588 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:59.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332626636633838383231363164336333303961396330386531333630 Jul 14 22:10:59.417000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit[3711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3588 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:59.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332626636633838383231363164336333303961396330386531333630 Jul 14 22:10:59.417000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.417000 audit: BPF prog-id=167 op=LOAD Jul 14 22:10:59.417000 audit[3711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3588 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:59.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332626636633838383231363164336333303961396330386531333630 Jul 14 22:10:59.419000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.419000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.419000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.419000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.419000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.419000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.419000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.419000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.419000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.419000 audit: BPF prog-id=168 op=LOAD Jul 14 22:10:59.419000 audit[3711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3588 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:59.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332626636633838383231363164336333303961396330386531333630 Jul 14 22:10:59.422000 audit: BPF prog-id=168 op=UNLOAD Jul 14 22:10:59.422000 audit: BPF prog-id=167 op=UNLOAD Jul 14 22:10:59.422000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.422000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.422000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.422000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.422000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.422000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.422000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.422000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.422000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.422000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:10:59.422000 audit: BPF prog-id=169 op=LOAD Jul 14 22:10:59.422000 audit[3711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3588 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:10:59.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332626636633838383231363164336333303961396330386531333630 Jul 14 22:10:59.456207 env[1215]: time="2025-07-14T22:10:59.454669871Z" level=info msg="StartContainer for \"32bf6c8882161d3c309a9c08e1360d94209eac27f90ec52df6dfa198d9c0f590\" returns successfully" Jul 14 22:11:00.226873 env[1215]: time="2025-07-14T22:11:00.226834015Z" level=info msg="StopPodSandbox for \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\"" Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.273 [INFO][3753] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.274 [INFO][3753] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" iface="eth0" netns="/var/run/netns/cni-82bf4a69-30ec-c89a-a3c5-6adc9d14d627" Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.275 [INFO][3753] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" iface="eth0" netns="/var/run/netns/cni-82bf4a69-30ec-c89a-a3c5-6adc9d14d627" Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.275 [INFO][3753] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" iface="eth0" netns="/var/run/netns/cni-82bf4a69-30ec-c89a-a3c5-6adc9d14d627" Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.275 [INFO][3753] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.275 [INFO][3753] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.296 [INFO][3762] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" HandleID="k8s-pod-network.0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Workload="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.296 [INFO][3762] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.296 [INFO][3762] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.304 [WARNING][3762] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" HandleID="k8s-pod-network.0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Workload="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.304 [INFO][3762] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" HandleID="k8s-pod-network.0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Workload="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.307 [INFO][3762] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:00.310726 env[1215]: 2025-07-14 22:11:00.309 [INFO][3753] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:11:00.313557 systemd[1]: run-netns-cni\x2d82bf4a69\x2d30ec\x2dc89a\x2da3c5\x2d6adc9d14d627.mount: Deactivated successfully. Jul 14 22:11:00.315312 env[1215]: time="2025-07-14T22:11:00.314517881Z" level=info msg="TearDown network for sandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\" successfully" Jul 14 22:11:00.315312 env[1215]: time="2025-07-14T22:11:00.314565121Z" level=info msg="StopPodSandbox for \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\" returns successfully" Jul 14 22:11:00.315312 env[1215]: time="2025-07-14T22:11:00.315198605Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6cfff6787d-9cqb9,Uid:f5a3fd3e-f137-4577-886c-7cb3c9ae091a,Namespace:calico-apiserver,Attempt:1,}" Jul 14 22:11:00.378894 kubelet[1999]: I0714 22:11:00.378517 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-b5685c7c9-2f6dl" podStartSLOduration=2.089942724 podStartE2EDuration="5.378496639s" podCreationTimestamp="2025-07-14 22:10:55 +0000 UTC" firstStartedPulling="2025-07-14 22:10:56.052268068 +0000 UTC m=+39.926650758" lastFinishedPulling="2025-07-14 22:10:59.340821943 +0000 UTC m=+43.215204673" observedRunningTime="2025-07-14 22:11:00.377722274 +0000 UTC m=+44.252105044" watchObservedRunningTime="2025-07-14 22:11:00.378496639 +0000 UTC m=+44.252879369" Jul 14 22:11:00.421000 audit[3793]: NETFILTER_CFG table=filter:106 family=2 entries=19 op=nft_register_rule pid=3793 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:00.421000 audit[3793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffffdf4a370 a2=0 a3=1 items=0 ppid=2099 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:00.421000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:00.431000 audit[3793]: NETFILTER_CFG table=nat:107 family=2 entries=21 op=nft_register_chain pid=3793 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:00.431000 audit[3793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=fffffdf4a370 a2=0 a3=1 items=0 ppid=2099 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:00.431000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:00.496054 systemd-networkd[1046]: cali928abdbb95f: Link UP Jul 14 22:11:00.499271 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 22:11:00.499356 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali928abdbb95f: link becomes ready Jul 14 22:11:00.498761 systemd-networkd[1046]: cali928abdbb95f: Gained carrier Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.368 [INFO][3769] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0 calico-apiserver-6cfff6787d- calico-apiserver f5a3fd3e-f137-4577-886c-7cb3c9ae091a 988 0 2025-07-14 22:10:37 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6cfff6787d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6cfff6787d-9cqb9 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali928abdbb95f [] [] }} ContainerID="a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-9cqb9" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-" Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.369 [INFO][3769] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-9cqb9" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.422 [INFO][3784] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" HandleID="k8s-pod-network.a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" Workload="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.422 [INFO][3784] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" HandleID="k8s-pod-network.a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" Workload="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ca0d0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6cfff6787d-9cqb9", "timestamp":"2025-07-14 22:11:00.422514033 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.422 [INFO][3784] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.422 [INFO][3784] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.422 [INFO][3784] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.433 [INFO][3784] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" host="localhost" Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.440 [INFO][3784] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.445 [INFO][3784] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.446 [INFO][3784] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.449 [INFO][3784] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.449 [INFO][3784] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" host="localhost" Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.450 [INFO][3784] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93 Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.488 [INFO][3784] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" host="localhost" Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.492 [INFO][3784] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" host="localhost" Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.492 [INFO][3784] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" host="localhost" Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.492 [INFO][3784] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:00.512419 env[1215]: 2025-07-14 22:11:00.492 [INFO][3784] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" HandleID="k8s-pod-network.a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" Workload="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:00.513368 env[1215]: 2025-07-14 22:11:00.494 [INFO][3769] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-9cqb9" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0", GenerateName:"calico-apiserver-6cfff6787d-", Namespace:"calico-apiserver", SelfLink:"", UID:"f5a3fd3e-f137-4577-886c-7cb3c9ae091a", ResourceVersion:"988", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6cfff6787d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6cfff6787d-9cqb9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali928abdbb95f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:00.513368 env[1215]: 2025-07-14 22:11:00.494 [INFO][3769] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-9cqb9" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:00.513368 env[1215]: 2025-07-14 22:11:00.494 [INFO][3769] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali928abdbb95f ContainerID="a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-9cqb9" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:00.513368 env[1215]: 2025-07-14 22:11:00.498 [INFO][3769] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-9cqb9" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:00.513368 env[1215]: 2025-07-14 22:11:00.499 [INFO][3769] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-9cqb9" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0", GenerateName:"calico-apiserver-6cfff6787d-", Namespace:"calico-apiserver", SelfLink:"", UID:"f5a3fd3e-f137-4577-886c-7cb3c9ae091a", ResourceVersion:"988", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6cfff6787d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93", Pod:"calico-apiserver-6cfff6787d-9cqb9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali928abdbb95f", MAC:"d6:44:79:e3:0b:19", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:00.513368 env[1215]: 2025-07-14 22:11:00.510 [INFO][3769] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-9cqb9" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:00.522703 env[1215]: time="2025-07-14T22:11:00.522639217Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:11:00.523086 env[1215]: time="2025-07-14T22:11:00.522680817Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:11:00.523086 env[1215]: time="2025-07-14T22:11:00.522711577Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:11:00.524153 env[1215]: time="2025-07-14T22:11:00.523692143Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93 pid=3813 runtime=io.containerd.runc.v2 Jul 14 22:11:00.528000 audit[3822]: NETFILTER_CFG table=filter:108 family=2 entries=50 op=nft_register_chain pid=3822 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:00.528000 audit[3822]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffd4d8a4c0 a2=0 a3=ffffbc4a3fa8 items=0 ppid=3397 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:00.528000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:00.539011 systemd[1]: Started cri-containerd-a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93.scope. Jul 14 22:11:00.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.578000 audit: BPF prog-id=170 op=LOAD Jul 14 22:11:00.578000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.578000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=3813 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:00.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131333065393333353931326564636566306533333731326362386162 Jul 14 22:11:00.578000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.578000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3813 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:00.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131333065393333353931326564636566306533333731326362386162 Jul 14 22:11:00.579000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.579000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.579000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.579000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.579000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.579000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.579000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.579000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.579000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.579000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.579000 audit: BPF prog-id=171 op=LOAD Jul 14 22:11:00.579000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=3813 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:00.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131333065393333353931326564636566306533333731326362386162 Jul 14 22:11:00.580000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.580000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.580000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.580000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.580000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.580000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.580000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.580000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.580000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.580000 audit: BPF prog-id=172 op=LOAD Jul 14 22:11:00.580000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=3813 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:00.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131333065393333353931326564636566306533333731326362386162 Jul 14 22:11:00.580000 audit: BPF prog-id=172 op=UNLOAD Jul 14 22:11:00.581000 audit: BPF prog-id=171 op=UNLOAD Jul 14 22:11:00.581000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.581000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.581000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.581000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.581000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.581000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.581000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.581000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.581000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.581000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:00.581000 audit: BPF prog-id=173 op=LOAD Jul 14 22:11:00.581000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=3813 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:00.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131333065393333353931326564636566306533333731326362386162 Jul 14 22:11:00.583767 systemd-resolved[1153]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:11:00.603350 env[1215]: time="2025-07-14T22:11:00.603307239Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6cfff6787d-9cqb9,Uid:f5a3fd3e-f137-4577-886c-7cb3c9ae091a,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93\"" Jul 14 22:11:00.605042 env[1215]: time="2025-07-14T22:11:00.605015210Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 14 22:11:01.226551 env[1215]: time="2025-07-14T22:11:01.226506962Z" level=info msg="StopPodSandbox for \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\"" Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.274 [INFO][3864] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.274 [INFO][3864] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" iface="eth0" netns="/var/run/netns/cni-ed7b4eb3-e150-978a-cdfd-96f678080ae8" Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.274 [INFO][3864] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" iface="eth0" netns="/var/run/netns/cni-ed7b4eb3-e150-978a-cdfd-96f678080ae8" Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.274 [INFO][3864] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" iface="eth0" netns="/var/run/netns/cni-ed7b4eb3-e150-978a-cdfd-96f678080ae8" Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.274 [INFO][3864] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.274 [INFO][3864] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.294 [INFO][3873] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" HandleID="k8s-pod-network.212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Workload="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.294 [INFO][3873] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.295 [INFO][3873] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.304 [WARNING][3873] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" HandleID="k8s-pod-network.212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Workload="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.304 [INFO][3873] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" HandleID="k8s-pod-network.212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Workload="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.306 [INFO][3873] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:01.309204 env[1215]: 2025-07-14 22:11:01.307 [INFO][3864] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:11:01.309802 env[1215]: time="2025-07-14T22:11:01.309770507Z" level=info msg="TearDown network for sandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\" successfully" Jul 14 22:11:01.309876 env[1215]: time="2025-07-14T22:11:01.309858068Z" level=info msg="StopPodSandbox for \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\" returns successfully" Jul 14 22:11:01.311815 systemd[1]: run-netns-cni\x2ded7b4eb3\x2de150\x2d978a\x2dcdfd\x2d96f678080ae8.mount: Deactivated successfully. Jul 14 22:11:01.312739 env[1215]: time="2025-07-14T22:11:01.312697325Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-64bcf76967-h67vb,Uid:d74727d3-06bd-4249-8964-7a335825fdf9,Namespace:calico-system,Attempt:1,}" Jul 14 22:11:01.422589 systemd-networkd[1046]: calif050fed0ee5: Link UP Jul 14 22:11:01.424620 systemd-networkd[1046]: calif050fed0ee5: Gained carrier Jul 14 22:11:01.425406 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif050fed0ee5: link becomes ready Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.357 [INFO][3881] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0 calico-kube-controllers-64bcf76967- calico-system d74727d3-06bd-4249-8964-7a335825fdf9 1000 0 2025-07-14 22:10:41 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:64bcf76967 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-64bcf76967-h67vb eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calif050fed0ee5 [] [] }} ContainerID="8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" Namespace="calico-system" Pod="calico-kube-controllers-64bcf76967-h67vb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-" Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.357 [INFO][3881] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" Namespace="calico-system" Pod="calico-kube-controllers-64bcf76967-h67vb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.385 [INFO][3897] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" HandleID="k8s-pod-network.8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" Workload="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.385 [INFO][3897] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" HandleID="k8s-pod-network.8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" Workload="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000136e70), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-64bcf76967-h67vb", "timestamp":"2025-07-14 22:11:01.385408445 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.385 [INFO][3897] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.385 [INFO][3897] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.385 [INFO][3897] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.394 [INFO][3897] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" host="localhost" Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.399 [INFO][3897] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.403 [INFO][3897] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.405 [INFO][3897] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.407 [INFO][3897] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.407 [INFO][3897] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" host="localhost" Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.408 [INFO][3897] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41 Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.411 [INFO][3897] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" host="localhost" Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.416 [INFO][3897] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" host="localhost" Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.417 [INFO][3897] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" host="localhost" Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.417 [INFO][3897] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:01.437827 env[1215]: 2025-07-14 22:11:01.417 [INFO][3897] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" HandleID="k8s-pod-network.8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" Workload="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:01.438412 env[1215]: 2025-07-14 22:11:01.419 [INFO][3881] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" Namespace="calico-system" Pod="calico-kube-controllers-64bcf76967-h67vb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0", GenerateName:"calico-kube-controllers-64bcf76967-", Namespace:"calico-system", SelfLink:"", UID:"d74727d3-06bd-4249-8964-7a335825fdf9", ResourceVersion:"1000", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"64bcf76967", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-64bcf76967-h67vb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif050fed0ee5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:01.438412 env[1215]: 2025-07-14 22:11:01.419 [INFO][3881] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" Namespace="calico-system" Pod="calico-kube-controllers-64bcf76967-h67vb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:01.438412 env[1215]: 2025-07-14 22:11:01.419 [INFO][3881] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif050fed0ee5 ContainerID="8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" Namespace="calico-system" Pod="calico-kube-controllers-64bcf76967-h67vb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:01.438412 env[1215]: 2025-07-14 22:11:01.425 [INFO][3881] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" Namespace="calico-system" Pod="calico-kube-controllers-64bcf76967-h67vb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:01.438412 env[1215]: 2025-07-14 22:11:01.426 [INFO][3881] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" Namespace="calico-system" Pod="calico-kube-controllers-64bcf76967-h67vb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0", GenerateName:"calico-kube-controllers-64bcf76967-", Namespace:"calico-system", SelfLink:"", UID:"d74727d3-06bd-4249-8964-7a335825fdf9", ResourceVersion:"1000", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"64bcf76967", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41", Pod:"calico-kube-controllers-64bcf76967-h67vb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif050fed0ee5", MAC:"5e:19:99:d9:0c:2e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:01.438412 env[1215]: 2025-07-14 22:11:01.434 [INFO][3881] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41" Namespace="calico-system" Pod="calico-kube-controllers-64bcf76967-h67vb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:01.444000 audit[3915]: NETFILTER_CFG table=filter:109 family=2 entries=46 op=nft_register_chain pid=3915 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:01.444000 audit[3915]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23616 a0=3 a1=ffffd5f72c50 a2=0 a3=ffff89ffcfa8 items=0 ppid=3397 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:01.444000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:01.448562 env[1215]: time="2025-07-14T22:11:01.448495628Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:11:01.448692 env[1215]: time="2025-07-14T22:11:01.448546748Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:11:01.448692 env[1215]: time="2025-07-14T22:11:01.448558188Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:11:01.448847 env[1215]: time="2025-07-14T22:11:01.448814270Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41 pid=3923 runtime=io.containerd.runc.v2 Jul 14 22:11:01.458973 systemd[1]: Started cri-containerd-8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41.scope. Jul 14 22:11:01.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit: BPF prog-id=174 op=LOAD Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3923 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:01.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373033373534313766373564653233383664356561363861393131 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3923 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:01.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373033373534313766373564653233383664356561363861393131 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit: BPF prog-id=175 op=LOAD Jul 14 22:11:01.489000 audit[3933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3923 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:01.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373033373534313766373564653233383664356561363861393131 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit: BPF prog-id=176 op=LOAD Jul 14 22:11:01.489000 audit[3933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3923 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:01.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373033373534313766373564653233383664356561363861393131 Jul 14 22:11:01.489000 audit: BPF prog-id=176 op=UNLOAD Jul 14 22:11:01.489000 audit: BPF prog-id=175 op=UNLOAD Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:01.489000 audit: BPF prog-id=177 op=LOAD Jul 14 22:11:01.489000 audit[3933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3923 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:01.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373033373534313766373564653233383664356561363861393131 Jul 14 22:11:01.492517 systemd-resolved[1153]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:11:01.510051 env[1215]: time="2025-07-14T22:11:01.510006760Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-64bcf76967-h67vb,Uid:d74727d3-06bd-4249-8964-7a335825fdf9,Namespace:calico-system,Attempt:1,} returns sandbox id \"8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41\"" Jul 14 22:11:02.226218 env[1215]: time="2025-07-14T22:11:02.226179144Z" level=info msg="StopPodSandbox for \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\"" Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.275 [INFO][3969] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.275 [INFO][3969] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" iface="eth0" netns="/var/run/netns/cni-ecba66c1-4afc-0ce2-7854-1c89033421b2" Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.275 [INFO][3969] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" iface="eth0" netns="/var/run/netns/cni-ecba66c1-4afc-0ce2-7854-1c89033421b2" Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.275 [INFO][3969] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" iface="eth0" netns="/var/run/netns/cni-ecba66c1-4afc-0ce2-7854-1c89033421b2" Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.275 [INFO][3969] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.275 [INFO][3969] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.296 [INFO][3978] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" HandleID="k8s-pod-network.65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Workload="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.296 [INFO][3978] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.297 [INFO][3978] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.306 [WARNING][3978] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" HandleID="k8s-pod-network.65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Workload="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.306 [INFO][3978] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" HandleID="k8s-pod-network.65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Workload="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.308 [INFO][3978] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:02.311594 env[1215]: 2025-07-14 22:11:02.310 [INFO][3969] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:11:02.312210 env[1215]: time="2025-07-14T22:11:02.312176011Z" level=info msg="TearDown network for sandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\" successfully" Jul 14 22:11:02.312289 env[1215]: time="2025-07-14T22:11:02.312273012Z" level=info msg="StopPodSandbox for \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\" returns successfully" Jul 14 22:11:02.314321 systemd[1]: run-netns-cni\x2decba66c1\x2d4afc\x2d0ce2\x2d7854\x2d1c89033421b2.mount: Deactivated successfully. Jul 14 22:11:02.315469 kubelet[1999]: E0714 22:11:02.315167 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:11:02.315834 env[1215]: time="2025-07-14T22:11:02.315653032Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-4b2tn,Uid:e5244a42-16bb-47e0-a9b1-018b075643ee,Namespace:kube-system,Attempt:1,}" Jul 14 22:11:02.428471 systemd-networkd[1046]: cali6d7bc0b482e: Link UP Jul 14 22:11:02.429695 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 22:11:02.429759 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6d7bc0b482e: link becomes ready Jul 14 22:11:02.429289 systemd-networkd[1046]: cali6d7bc0b482e: Gained carrier Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.370 [INFO][3985] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0 coredns-668d6bf9bc- kube-system e5244a42-16bb-47e0-a9b1-018b075643ee 1008 0 2025-07-14 22:10:22 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-4b2tn eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali6d7bc0b482e [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" Namespace="kube-system" Pod="coredns-668d6bf9bc-4b2tn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4b2tn-" Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.370 [INFO][3985] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" Namespace="kube-system" Pod="coredns-668d6bf9bc-4b2tn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.391 [INFO][4000] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" HandleID="k8s-pod-network.c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" Workload="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.391 [INFO][4000] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" HandleID="k8s-pod-network.c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" Workload="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c790), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-4b2tn", "timestamp":"2025-07-14 22:11:02.391801641 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.391 [INFO][4000] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.392 [INFO][4000] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.392 [INFO][4000] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.401 [INFO][4000] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" host="localhost" Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.405 [INFO][4000] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.409 [INFO][4000] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.410 [INFO][4000] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.412 [INFO][4000] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.412 [INFO][4000] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" host="localhost" Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.413 [INFO][4000] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9 Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.417 [INFO][4000] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" host="localhost" Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.422 [INFO][4000] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" host="localhost" Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.422 [INFO][4000] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" host="localhost" Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.422 [INFO][4000] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:02.447014 env[1215]: 2025-07-14 22:11:02.422 [INFO][4000] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" HandleID="k8s-pod-network.c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" Workload="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:02.447656 env[1215]: 2025-07-14 22:11:02.425 [INFO][3985] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" Namespace="kube-system" Pod="coredns-668d6bf9bc-4b2tn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"e5244a42-16bb-47e0-a9b1-018b075643ee", ResourceVersion:"1008", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-4b2tn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6d7bc0b482e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:02.447656 env[1215]: 2025-07-14 22:11:02.425 [INFO][3985] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" Namespace="kube-system" Pod="coredns-668d6bf9bc-4b2tn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:02.447656 env[1215]: 2025-07-14 22:11:02.425 [INFO][3985] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6d7bc0b482e ContainerID="c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" Namespace="kube-system" Pod="coredns-668d6bf9bc-4b2tn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:02.447656 env[1215]: 2025-07-14 22:11:02.429 [INFO][3985] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" Namespace="kube-system" Pod="coredns-668d6bf9bc-4b2tn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:02.447656 env[1215]: 2025-07-14 22:11:02.432 [INFO][3985] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" Namespace="kube-system" Pod="coredns-668d6bf9bc-4b2tn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"e5244a42-16bb-47e0-a9b1-018b075643ee", ResourceVersion:"1008", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9", Pod:"coredns-668d6bf9bc-4b2tn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6d7bc0b482e", MAC:"0e:72:e9:2b:38:aa", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:02.447656 env[1215]: 2025-07-14 22:11:02.442 [INFO][3985] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9" Namespace="kube-system" Pod="coredns-668d6bf9bc-4b2tn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:02.456576 systemd-networkd[1046]: cali928abdbb95f: Gained IPv6LL Jul 14 22:11:02.455000 audit[4018]: NETFILTER_CFG table=filter:110 family=2 entries=46 op=nft_register_chain pid=4018 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:02.455000 audit[4018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23724 a0=3 a1=fffffcb45b10 a2=0 a3=ffffb653cfa8 items=0 ppid=3397 pid=4018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.455000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:02.469011 env[1215]: time="2025-07-14T22:11:02.468936656Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:11:02.469011 env[1215]: time="2025-07-14T22:11:02.468977496Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:11:02.469011 env[1215]: time="2025-07-14T22:11:02.468987776Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:11:02.469346 env[1215]: time="2025-07-14T22:11:02.469309858Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9 pid=4025 runtime=io.containerd.runc.v2 Jul 14 22:11:02.489540 systemd[1]: Started cri-containerd-c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9.scope. Jul 14 22:11:02.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.529000 audit: BPF prog-id=178 op=LOAD Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4025 pid=4037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.530000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363365663932396436643236306232336266643535653937323665 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4025 pid=4037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.530000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363365663932396436643236306232336266643535653937323665 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit: BPF prog-id=179 op=LOAD Jul 14 22:11:02.530000 audit[4037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4025 pid=4037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.530000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363365663932396436643236306232336266643535653937323665 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit: BPF prog-id=180 op=LOAD Jul 14 22:11:02.530000 audit[4037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4025 pid=4037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.530000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363365663932396436643236306232336266643535653937323665 Jul 14 22:11:02.530000 audit: BPF prog-id=180 op=UNLOAD Jul 14 22:11:02.530000 audit: BPF prog-id=179 op=UNLOAD Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.530000 audit: BPF prog-id=181 op=LOAD Jul 14 22:11:02.530000 audit[4037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4025 pid=4037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.530000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363365663932396436643236306232336266643535653937323665 Jul 14 22:11:02.533140 systemd-resolved[1153]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:11:02.547625 env[1215]: time="2025-07-14T22:11:02.547585319Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-4b2tn,Uid:e5244a42-16bb-47e0-a9b1-018b075643ee,Namespace:kube-system,Attempt:1,} returns sandbox id \"c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9\"" Jul 14 22:11:02.548404 kubelet[1999]: E0714 22:11:02.548333 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:11:02.550206 env[1215]: time="2025-07-14T22:11:02.550176375Z" level=info msg="CreateContainer within sandbox \"c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 22:11:02.562684 env[1215]: time="2025-07-14T22:11:02.562635408Z" level=info msg="CreateContainer within sandbox \"c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"9c274943127a3912b77c481ec1f2e9096ebe89d6f607a37116f37a69762219a6\"" Jul 14 22:11:02.563420 env[1215]: time="2025-07-14T22:11:02.563357452Z" level=info msg="StartContainer for \"9c274943127a3912b77c481ec1f2e9096ebe89d6f607a37116f37a69762219a6\"" Jul 14 22:11:02.577483 systemd[1]: Started cri-containerd-9c274943127a3912b77c481ec1f2e9096ebe89d6f607a37116f37a69762219a6.scope. Jul 14 22:11:02.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.609000 audit: BPF prog-id=182 op=LOAD Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4025 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963323734393433313237613339313262373763343831656331663265 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4025 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963323734393433313237613339313262373763343831656331663265 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit: BPF prog-id=183 op=LOAD Jul 14 22:11:02.610000 audit[4065]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4025 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963323734393433313237613339313262373763343831656331663265 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit: BPF prog-id=184 op=LOAD Jul 14 22:11:02.610000 audit[4065]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4025 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963323734393433313237613339313262373763343831656331663265 Jul 14 22:11:02.610000 audit: BPF prog-id=184 op=UNLOAD Jul 14 22:11:02.610000 audit: BPF prog-id=183 op=UNLOAD Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.610000 audit: BPF prog-id=185 op=LOAD Jul 14 22:11:02.610000 audit[4065]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4025 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963323734393433313237613339313262373763343831656331663265 Jul 14 22:11:02.625918 env[1215]: time="2025-07-14T22:11:02.624504533Z" level=info msg="StartContainer for \"9c274943127a3912b77c481ec1f2e9096ebe89d6f607a37116f37a69762219a6\" returns successfully" Jul 14 22:11:02.648591 systemd-networkd[1046]: calif050fed0ee5: Gained IPv6LL Jul 14 22:11:02.716000 audit[4076]: AVC avc: denied { getattr } for pid=4076 comm="coredns" path="cgroup:[4026532315]" dev="nsfs" ino=4026532315 scontext=system_u:system_r:svirt_lxc_net_t:s0:c250,c659 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 22:11:02.716000 audit[4076]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056960 a2=4000156578 a3=0 items=0 ppid=4025 pid=4076 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c250,c659 key=(null) Jul 14 22:11:02.716000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 22:11:02.776278 env[1215]: time="2025-07-14T22:11:02.776175268Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:02.779843 env[1215]: time="2025-07-14T22:11:02.779809769Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:02.781037 env[1215]: time="2025-07-14T22:11:02.780997256Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:02.782352 env[1215]: time="2025-07-14T22:11:02.782316304Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:02.782911 env[1215]: time="2025-07-14T22:11:02.782880467Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 14 22:11:02.784611 env[1215]: time="2025-07-14T22:11:02.784579397Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 14 22:11:02.785398 env[1215]: time="2025-07-14T22:11:02.785351122Z" level=info msg="CreateContainer within sandbox \"a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 22:11:02.797319 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4123445393.mount: Deactivated successfully. Jul 14 22:11:02.805433 env[1215]: time="2025-07-14T22:11:02.805364600Z" level=info msg="CreateContainer within sandbox \"a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"051baf9a4efbf472b6d6cb3648e0a53dbdca73916d48bf265c534c99051c67ec\"" Jul 14 22:11:02.806131 env[1215]: time="2025-07-14T22:11:02.806100244Z" level=info msg="StartContainer for \"051baf9a4efbf472b6d6cb3648e0a53dbdca73916d48bf265c534c99051c67ec\"" Jul 14 22:11:02.830121 systemd[1]: Started cri-containerd-051baf9a4efbf472b6d6cb3648e0a53dbdca73916d48bf265c534c99051c67ec.scope. Jul 14 22:11:02.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.854000 audit: BPF prog-id=186 op=LOAD Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3813 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316261663961346566626634373262366436636233363438653061 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3813 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316261663961346566626634373262366436636233363438653061 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit: BPF prog-id=187 op=LOAD Jul 14 22:11:02.855000 audit[4103]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3813 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316261663961346566626634373262366436636233363438653061 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit: BPF prog-id=188 op=LOAD Jul 14 22:11:02.855000 audit[4103]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3813 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316261663961346566626634373262366436636233363438653061 Jul 14 22:11:02.855000 audit: BPF prog-id=188 op=UNLOAD Jul 14 22:11:02.855000 audit: BPF prog-id=187 op=UNLOAD Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:02.855000 audit: BPF prog-id=189 op=LOAD Jul 14 22:11:02.855000 audit[4103]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3813 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:02.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316261663961346566626634373262366436636233363438653061 Jul 14 22:11:02.874912 env[1215]: time="2025-07-14T22:11:02.874870410Z" level=info msg="StartContainer for \"051baf9a4efbf472b6d6cb3648e0a53dbdca73916d48bf265c534c99051c67ec\" returns successfully" Jul 14 22:11:03.227155 env[1215]: time="2025-07-14T22:11:03.227117331Z" level=info msg="StopPodSandbox for \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\"" Jul 14 22:11:03.228836 env[1215]: time="2025-07-14T22:11:03.227334973Z" level=info msg="StopPodSandbox for \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\"" Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.273 [INFO][4160] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.273 [INFO][4160] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" iface="eth0" netns="/var/run/netns/cni-a2d25a3f-9ff1-4249-a322-90aa0f95d961" Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.273 [INFO][4160] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" iface="eth0" netns="/var/run/netns/cni-a2d25a3f-9ff1-4249-a322-90aa0f95d961" Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.274 [INFO][4160] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" iface="eth0" netns="/var/run/netns/cni-a2d25a3f-9ff1-4249-a322-90aa0f95d961" Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.274 [INFO][4160] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.275 [INFO][4160] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.326 [INFO][4176] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" HandleID="k8s-pod-network.27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.326 [INFO][4176] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.327 [INFO][4176] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.335 [WARNING][4176] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" HandleID="k8s-pod-network.27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.335 [INFO][4176] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" HandleID="k8s-pod-network.27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.337 [INFO][4176] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:03.343000 env[1215]: 2025-07-14 22:11:03.339 [INFO][4160] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:11:03.343000 env[1215]: time="2025-07-14T22:11:03.341985671Z" level=info msg="TearDown network for sandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\" successfully" Jul 14 22:11:03.343000 env[1215]: time="2025-07-14T22:11:03.342019551Z" level=info msg="StopPodSandbox for \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\" returns successfully" Jul 14 22:11:03.343000 env[1215]: time="2025-07-14T22:11:03.342730595Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c87d7d578-68hlv,Uid:6c50cb2a-3c39-4f9d-91d6-7f2c4d312652,Namespace:calico-apiserver,Attempt:1,}" Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.294 [INFO][4163] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.294 [INFO][4163] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" iface="eth0" netns="/var/run/netns/cni-bbd78eeb-31cf-a90d-95a2-ef5f5af1dc6f" Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.294 [INFO][4163] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" iface="eth0" netns="/var/run/netns/cni-bbd78eeb-31cf-a90d-95a2-ef5f5af1dc6f" Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.294 [INFO][4163] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" iface="eth0" netns="/var/run/netns/cni-bbd78eeb-31cf-a90d-95a2-ef5f5af1dc6f" Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.294 [INFO][4163] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.294 [INFO][4163] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.327 [INFO][4185] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" HandleID="k8s-pod-network.e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Workload="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.327 [INFO][4185] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.337 [INFO][4185] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.345 [WARNING][4185] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" HandleID="k8s-pod-network.e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Workload="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.345 [INFO][4185] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" HandleID="k8s-pod-network.e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Workload="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.347 [INFO][4185] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:03.351806 env[1215]: 2025-07-14 22:11:03.349 [INFO][4163] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:11:03.352417 env[1215]: time="2025-07-14T22:11:03.352371290Z" level=info msg="TearDown network for sandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\" successfully" Jul 14 22:11:03.352489 env[1215]: time="2025-07-14T22:11:03.352473691Z" level=info msg="StopPodSandbox for \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\" returns successfully" Jul 14 22:11:03.353202 env[1215]: time="2025-07-14T22:11:03.353171495Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-z7ctx,Uid:c5224d5a-68ce-4d91-9c1a-81aee0017fc6,Namespace:calico-system,Attempt:1,}" Jul 14 22:11:03.375640 kubelet[1999]: E0714 22:11:03.375609 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:11:03.395942 kubelet[1999]: I0714 22:11:03.395438 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6cfff6787d-9cqb9" podStartSLOduration=24.216162752 podStartE2EDuration="26.395421098s" podCreationTimestamp="2025-07-14 22:10:37 +0000 UTC" firstStartedPulling="2025-07-14 22:11:00.604492486 +0000 UTC m=+44.478875216" lastFinishedPulling="2025-07-14 22:11:02.783750832 +0000 UTC m=+46.658133562" observedRunningTime="2025-07-14 22:11:03.383789231 +0000 UTC m=+47.258171961" watchObservedRunningTime="2025-07-14 22:11:03.395421098 +0000 UTC m=+47.269803828" Jul 14 22:11:03.395942 kubelet[1999]: I0714 22:11:03.395603 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-4b2tn" podStartSLOduration=41.395599099 podStartE2EDuration="41.395599099s" podCreationTimestamp="2025-07-14 22:10:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:11:03.395280137 +0000 UTC m=+47.269662867" watchObservedRunningTime="2025-07-14 22:11:03.395599099 +0000 UTC m=+47.269981829" Jul 14 22:11:03.410000 audit[4222]: NETFILTER_CFG table=filter:111 family=2 entries=18 op=nft_register_rule pid=4222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:03.410000 audit[4222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff0bb79f0 a2=0 a3=1 items=0 ppid=2099 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.410000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:03.415000 audit[4222]: NETFILTER_CFG table=nat:112 family=2 entries=16 op=nft_register_rule pid=4222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:03.415000 audit[4222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=fffff0bb79f0 a2=0 a3=1 items=0 ppid=2099 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.415000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:03.429000 audit[4233]: NETFILTER_CFG table=filter:113 family=2 entries=15 op=nft_register_rule pid=4233 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:03.429000 audit[4233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffeee02d30 a2=0 a3=1 items=0 ppid=2099 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.429000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:03.434000 audit[4233]: NETFILTER_CFG table=nat:114 family=2 entries=37 op=nft_register_chain pid=4233 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:03.434000 audit[4233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffeee02d30 a2=0 a3=1 items=0 ppid=2099 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.434000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:03.533404 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 22:11:03.533542 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7e64c216a26: link becomes ready Jul 14 22:11:03.533558 systemd-networkd[1046]: cali7e64c216a26: Link UP Jul 14 22:11:03.534638 systemd-networkd[1046]: cali7e64c216a26: Gained carrier Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.405 [INFO][4195] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0 calico-apiserver-7c87d7d578- calico-apiserver 6c50cb2a-3c39-4f9d-91d6-7f2c4d312652 1023 0 2025-07-14 22:10:36 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7c87d7d578 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7c87d7d578-68hlv eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali7e64c216a26 [] [] }} ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-68hlv" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-" Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.405 [INFO][4195] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-68hlv" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.468 [INFO][4226] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" HandleID="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.468 [INFO][4226] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" HandleID="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40004362d0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7c87d7d578-68hlv", "timestamp":"2025-07-14 22:11:03.468134355 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.469 [INFO][4226] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.469 [INFO][4226] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.469 [INFO][4226] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.485 [INFO][4226] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" host="localhost" Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.495 [INFO][4226] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.502 [INFO][4226] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.503 [INFO][4226] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.509 [INFO][4226] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.509 [INFO][4226] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" host="localhost" Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.511 [INFO][4226] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4 Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.515 [INFO][4226] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" host="localhost" Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.522 [INFO][4226] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" host="localhost" Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.522 [INFO][4226] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" host="localhost" Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.522 [INFO][4226] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:03.549362 env[1215]: 2025-07-14 22:11:03.522 [INFO][4226] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" HandleID="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:03.550527 env[1215]: 2025-07-14 22:11:03.530 [INFO][4195] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-68hlv" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0", GenerateName:"calico-apiserver-7c87d7d578-", Namespace:"calico-apiserver", SelfLink:"", UID:"6c50cb2a-3c39-4f9d-91d6-7f2c4d312652", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c87d7d578", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7c87d7d578-68hlv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7e64c216a26", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:03.550527 env[1215]: 2025-07-14 22:11:03.530 [INFO][4195] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-68hlv" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:03.550527 env[1215]: 2025-07-14 22:11:03.530 [INFO][4195] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7e64c216a26 ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-68hlv" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:03.550527 env[1215]: 2025-07-14 22:11:03.536 [INFO][4195] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-68hlv" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:03.550527 env[1215]: 2025-07-14 22:11:03.536 [INFO][4195] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-68hlv" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0", GenerateName:"calico-apiserver-7c87d7d578-", Namespace:"calico-apiserver", SelfLink:"", UID:"6c50cb2a-3c39-4f9d-91d6-7f2c4d312652", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c87d7d578", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4", Pod:"calico-apiserver-7c87d7d578-68hlv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7e64c216a26", MAC:"b2:44:46:bc:87:06", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:03.550527 env[1215]: 2025-07-14 22:11:03.545 [INFO][4195] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-68hlv" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:03.557000 audit[4256]: NETFILTER_CFG table=filter:115 family=2 entries=45 op=nft_register_chain pid=4256 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:03.557000 audit[4256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24248 a0=3 a1=ffffcb991bd0 a2=0 a3=ffff929b0fa8 items=0 ppid=3397 pid=4256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.557000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:03.562970 env[1215]: time="2025-07-14T22:11:03.562795098Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:11:03.562970 env[1215]: time="2025-07-14T22:11:03.562839579Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:11:03.562970 env[1215]: time="2025-07-14T22:11:03.562849059Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:11:03.563117 env[1215]: time="2025-07-14T22:11:03.563056660Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4 pid=4264 runtime=io.containerd.runc.v2 Jul 14 22:11:03.574049 systemd[1]: Started cri-containerd-7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4.scope. Jul 14 22:11:03.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit: BPF prog-id=190 op=LOAD Jul 14 22:11:03.609000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[4274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4264 pid=4274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766346466663939316334373734653638316635313938353363373833 Jul 14 22:11:03.609000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[4274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4264 pid=4274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766346466663939316334373734653638316635313938353363373833 Jul 14 22:11:03.609000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.609000 audit: BPF prog-id=191 op=LOAD Jul 14 22:11:03.609000 audit[4274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4264 pid=4274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766346466663939316334373734653638316635313938353363373833 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit: BPF prog-id=192 op=LOAD Jul 14 22:11:03.610000 audit[4274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4264 pid=4274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766346466663939316334373734653638316635313938353363373833 Jul 14 22:11:03.610000 audit: BPF prog-id=192 op=UNLOAD Jul 14 22:11:03.610000 audit: BPF prog-id=191 op=UNLOAD Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.610000 audit: BPF prog-id=193 op=LOAD Jul 14 22:11:03.610000 audit[4274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4264 pid=4274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766346466663939316334373734653638316635313938353363373833 Jul 14 22:11:03.612519 systemd-resolved[1153]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:11:03.638344 systemd-networkd[1046]: cali9a0a2e6384d: Link UP Jul 14 22:11:03.639622 systemd-networkd[1046]: cali9a0a2e6384d: Gained carrier Jul 14 22:11:03.640479 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9a0a2e6384d: link becomes ready Jul 14 22:11:03.640980 env[1215]: time="2025-07-14T22:11:03.640946547Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c87d7d578-68hlv,Uid:6c50cb2a-3c39-4f9d-91d6-7f2c4d312652,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\"" Jul 14 22:11:03.647456 env[1215]: time="2025-07-14T22:11:03.643558322Z" level=info msg="CreateContainer within sandbox \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 22:11:03.653778 env[1215]: time="2025-07-14T22:11:03.653732420Z" level=info msg="CreateContainer within sandbox \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\"" Jul 14 22:11:03.655536 env[1215]: time="2025-07-14T22:11:03.654364544Z" level=info msg="StartContainer for \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\"" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.462 [INFO][4208] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0 goldmane-768f4c5c69- calico-system c5224d5a-68ce-4d91-9c1a-81aee0017fc6 1024 0 2025-07-14 22:10:40 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-z7ctx eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali9a0a2e6384d [] [] }} ContainerID="436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" Namespace="calico-system" Pod="goldmane-768f4c5c69-z7ctx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z7ctx-" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.462 [INFO][4208] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" Namespace="calico-system" Pod="goldmane-768f4c5c69-z7ctx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.514 [INFO][4239] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" HandleID="k8s-pod-network.436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" Workload="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.514 [INFO][4239] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" HandleID="k8s-pod-network.436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" Workload="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003ac340), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-z7ctx", "timestamp":"2025-07-14 22:11:03.51421982 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.514 [INFO][4239] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.522 [INFO][4239] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.522 [INFO][4239] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.589 [INFO][4239] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" host="localhost" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.595 [INFO][4239] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.605 [INFO][4239] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.607 [INFO][4239] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.615 [INFO][4239] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.615 [INFO][4239] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" host="localhost" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.616 [INFO][4239] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.621 [INFO][4239] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" host="localhost" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.629 [INFO][4239] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" host="localhost" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.629 [INFO][4239] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" host="localhost" Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.629 [INFO][4239] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:03.657230 env[1215]: 2025-07-14 22:11:03.629 [INFO][4239] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" HandleID="k8s-pod-network.436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" Workload="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:03.658163 env[1215]: 2025-07-14 22:11:03.632 [INFO][4208] cni-plugin/k8s.go 418: Populated endpoint ContainerID="436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" Namespace="calico-system" Pod="goldmane-768f4c5c69-z7ctx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"c5224d5a-68ce-4d91-9c1a-81aee0017fc6", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-z7ctx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali9a0a2e6384d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:03.658163 env[1215]: 2025-07-14 22:11:03.632 [INFO][4208] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" Namespace="calico-system" Pod="goldmane-768f4c5c69-z7ctx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:03.658163 env[1215]: 2025-07-14 22:11:03.632 [INFO][4208] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9a0a2e6384d ContainerID="436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" Namespace="calico-system" Pod="goldmane-768f4c5c69-z7ctx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:03.658163 env[1215]: 2025-07-14 22:11:03.641 [INFO][4208] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" Namespace="calico-system" Pod="goldmane-768f4c5c69-z7ctx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:03.658163 env[1215]: 2025-07-14 22:11:03.641 [INFO][4208] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" Namespace="calico-system" Pod="goldmane-768f4c5c69-z7ctx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"c5224d5a-68ce-4d91-9c1a-81aee0017fc6", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c", Pod:"goldmane-768f4c5c69-z7ctx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali9a0a2e6384d", MAC:"56:83:24:ef:d8:21", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:03.658163 env[1215]: 2025-07-14 22:11:03.651 [INFO][4208] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c" Namespace="calico-system" Pod="goldmane-768f4c5c69-z7ctx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:03.676222 systemd[1]: Started cri-containerd-cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb.scope. Jul 14 22:11:03.680676 env[1215]: time="2025-07-14T22:11:03.677004554Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:11:03.680676 env[1215]: time="2025-07-14T22:11:03.677057634Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:11:03.680676 env[1215]: time="2025-07-14T22:11:03.677068754Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:11:03.680676 env[1215]: time="2025-07-14T22:11:03.679566369Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c pid=4333 runtime=io.containerd.runc.v2 Jul 14 22:11:03.685000 audit[4343]: NETFILTER_CFG table=filter:116 family=2 entries=48 op=nft_register_chain pid=4343 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:03.685000 audit[4343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26388 a0=3 a1=ffffeab03160 a2=0 a3=ffffb9d30fa8 items=0 ppid=3397 pid=4343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.685000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:03.693097 systemd[1]: Started cri-containerd-436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c.scope. Jul 14 22:11:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.710000 audit: BPF prog-id=194 op=LOAD Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4264 pid=4313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653033363930326336323431323961353764336430623139343665 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4264 pid=4313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653033363930326336323431323961353764336430623139343665 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit: BPF prog-id=195 op=LOAD Jul 14 22:11:03.711000 audit[4313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4264 pid=4313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653033363930326336323431323961353764336430623139343665 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit: BPF prog-id=196 op=LOAD Jul 14 22:11:03.711000 audit[4313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4264 pid=4313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653033363930326336323431323961353764336430623139343665 Jul 14 22:11:03.711000 audit: BPF prog-id=196 op=UNLOAD Jul 14 22:11:03.711000 audit: BPF prog-id=195 op=UNLOAD Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { perfmon } for pid=4313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit[4313]: AVC avc: denied { bpf } for pid=4313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.711000 audit: BPF prog-id=197 op=LOAD Jul 14 22:11:03.711000 audit[4313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4264 pid=4313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653033363930326336323431323961353764336430623139343665 Jul 14 22:11:03.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.721000 audit: BPF prog-id=198 op=LOAD Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4333 pid=4344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433363634316264346362336536306532353662333964353838363538 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4333 pid=4344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433363634316264346362336536306532353662333964353838363538 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit: BPF prog-id=199 op=LOAD Jul 14 22:11:03.722000 audit[4344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4333 pid=4344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433363634316264346362336536306532353662333964353838363538 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit: BPF prog-id=200 op=LOAD Jul 14 22:11:03.722000 audit[4344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4333 pid=4344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433363634316264346362336536306532353662333964353838363538 Jul 14 22:11:03.722000 audit: BPF prog-id=200 op=UNLOAD Jul 14 22:11:03.722000 audit: BPF prog-id=199 op=UNLOAD Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { perfmon } for pid=4344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit[4344]: AVC avc: denied { bpf } for pid=4344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:03.722000 audit: BPF prog-id=201 op=LOAD Jul 14 22:11:03.722000 audit[4344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4333 pid=4344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:03.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433363634316264346362336536306532353662333964353838363538 Jul 14 22:11:03.726255 systemd-resolved[1153]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:11:03.749933 env[1215]: time="2025-07-14T22:11:03.749888132Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-z7ctx,Uid:c5224d5a-68ce-4d91-9c1a-81aee0017fc6,Namespace:calico-system,Attempt:1,} returns sandbox id \"436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c\"" Jul 14 22:11:03.755164 env[1215]: time="2025-07-14T22:11:03.755113122Z" level=info msg="StartContainer for \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\" returns successfully" Jul 14 22:11:03.763274 systemd[1]: run-containerd-runc-k8s.io-051baf9a4efbf472b6d6cb3648e0a53dbdca73916d48bf265c534c99051c67ec-runc.F7JKqZ.mount: Deactivated successfully. Jul 14 22:11:03.763581 systemd[1]: run-netns-cni\x2dbbd78eeb\x2d31cf\x2da90d\x2d95a2\x2def5f5af1dc6f.mount: Deactivated successfully. Jul 14 22:11:03.763715 systemd[1]: run-netns-cni\x2da2d25a3f\x2d9ff1\x2d4249\x2da322\x2d90aa0f95d961.mount: Deactivated successfully. Jul 14 22:11:04.229355 env[1215]: time="2025-07-14T22:11:04.229317970Z" level=info msg="StopPodSandbox for \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\"" Jul 14 22:11:04.230066 env[1215]: time="2025-07-14T22:11:04.230040854Z" level=info msg="StopPodSandbox for \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\"" Jul 14 22:11:04.380967 systemd-networkd[1046]: cali6d7bc0b482e: Gained IPv6LL Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.298 [INFO][4415] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.298 [INFO][4415] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" iface="eth0" netns="/var/run/netns/cni-071708f2-22e3-9bed-9161-c3b824c77336" Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.301 [INFO][4415] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" iface="eth0" netns="/var/run/netns/cni-071708f2-22e3-9bed-9161-c3b824c77336" Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.301 [INFO][4415] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" iface="eth0" netns="/var/run/netns/cni-071708f2-22e3-9bed-9161-c3b824c77336" Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.301 [INFO][4415] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.301 [INFO][4415] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.336 [INFO][4431] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" HandleID="k8s-pod-network.da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Workload="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.336 [INFO][4431] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.336 [INFO][4431] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.357 [WARNING][4431] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" HandleID="k8s-pod-network.da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Workload="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.357 [INFO][4431] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" HandleID="k8s-pod-network.da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Workload="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.366 [INFO][4431] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:04.382751 env[1215]: 2025-07-14 22:11:04.377 [INFO][4415] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:11:04.386531 env[1215]: time="2025-07-14T22:11:04.385255841Z" level=info msg="TearDown network for sandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\" successfully" Jul 14 22:11:04.386531 env[1215]: time="2025-07-14T22:11:04.385292201Z" level=info msg="StopPodSandbox for \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\" returns successfully" Jul 14 22:11:04.386531 env[1215]: time="2025-07-14T22:11:04.385766684Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7cvd9,Uid:eef8fcaf-a4a7-424c-b65e-81db6db1c77a,Namespace:calico-system,Attempt:1,}" Jul 14 22:11:04.385885 systemd[1]: run-netns-cni\x2d071708f2\x2d22e3\x2d9bed\x2d9161\x2dc3b824c77336.mount: Deactivated successfully. Jul 14 22:11:04.389262 kubelet[1999]: E0714 22:11:04.389229 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.316 [INFO][4416] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.316 [INFO][4416] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" iface="eth0" netns="/var/run/netns/cni-23924688-5a0e-765c-b3d6-6bdd6b93d31a" Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.316 [INFO][4416] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" iface="eth0" netns="/var/run/netns/cni-23924688-5a0e-765c-b3d6-6bdd6b93d31a" Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.316 [INFO][4416] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" iface="eth0" netns="/var/run/netns/cni-23924688-5a0e-765c-b3d6-6bdd6b93d31a" Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.316 [INFO][4416] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.316 [INFO][4416] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.355 [INFO][4439] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" HandleID="k8s-pod-network.29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Workload="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.355 [INFO][4439] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.366 [INFO][4439] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.385 [WARNING][4439] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" HandleID="k8s-pod-network.29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Workload="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.385 [INFO][4439] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" HandleID="k8s-pod-network.29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Workload="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.388 [INFO][4439] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:04.395350 env[1215]: 2025-07-14 22:11:04.393 [INFO][4416] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:11:04.396112 env[1215]: time="2025-07-14T22:11:04.395572219Z" level=info msg="TearDown network for sandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\" successfully" Jul 14 22:11:04.396112 env[1215]: time="2025-07-14T22:11:04.395605019Z" level=info msg="StopPodSandbox for \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\" returns successfully" Jul 14 22:11:04.398774 systemd[1]: run-netns-cni\x2d23924688\x2d5a0e\x2d765c\x2db3d6\x2d6bdd6b93d31a.mount: Deactivated successfully. Jul 14 22:11:04.407923 kubelet[1999]: I0714 22:11:04.407803 1999 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:11:04.409180 kubelet[1999]: E0714 22:11:04.409145 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:11:04.416797 env[1215]: time="2025-07-14T22:11:04.416738297Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-vdc7j,Uid:b6800f40-1a9b-4489-93ca-766d5603dcc6,Namespace:kube-system,Attempt:1,}" Jul 14 22:11:04.430000 audit[4451]: NETFILTER_CFG table=filter:117 family=2 entries=12 op=nft_register_rule pid=4451 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:04.436527 kernel: kauditd_printk_skb: 539 callbacks suppressed Jul 14 22:11:04.436608 kernel: audit: type=1325 audit(1752531064.430:1341): table=filter:117 family=2 entries=12 op=nft_register_rule pid=4451 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:04.436633 kernel: audit: type=1400 audit(1752531064.433:1342): avc: denied { watch } for pid=4113 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_10_48.2114878254/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c390,c995 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c390,c995 tclass=file permissive=0 Jul 14 22:11:04.433000 audit[4113]: AVC avc: denied { watch } for pid=4113 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_10_48.2114878254/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c390,c995 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c390,c995 tclass=file permissive=0 Jul 14 22:11:04.433000 audit[4113]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000c883c0 a2=fc6 a3=0 items=0 ppid=3813 pid=4113 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c390,c995 key=(null) Jul 14 22:11:04.444052 kernel: audit: type=1300 audit(1752531064.433:1342): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000c883c0 a2=fc6 a3=0 items=0 ppid=3813 pid=4113 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c390,c995 key=(null) Jul 14 22:11:04.444123 kernel: audit: type=1327 audit(1752531064.433:1342): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:11:04.433000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:11:04.430000 audit[4451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc9165850 a2=0 a3=1 items=0 ppid=2099 pid=4451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.451045 kernel: audit: type=1300 audit(1752531064.430:1341): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc9165850 a2=0 a3=1 items=0 ppid=2099 pid=4451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.451110 kernel: audit: type=1327 audit(1752531064.430:1341): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:04.430000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:04.453000 audit[4451]: NETFILTER_CFG table=nat:118 family=2 entries=22 op=nft_register_rule pid=4451 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:04.457395 kernel: audit: type=1325 audit(1752531064.453:1343): table=nat:118 family=2 entries=22 op=nft_register_rule pid=4451 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:04.453000 audit[4451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc9165850 a2=0 a3=1 items=0 ppid=2099 pid=4451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.462411 kernel: audit: type=1300 audit(1752531064.453:1343): arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc9165850 a2=0 a3=1 items=0 ppid=2099 pid=4451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.453000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:04.468407 kernel: audit: type=1327 audit(1752531064.453:1343): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:04.593475 systemd-networkd[1046]: cali26aa3acf023: Link UP Jul 14 22:11:04.596531 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 22:11:04.596906 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali26aa3acf023: link becomes ready Jul 14 22:11:04.596712 systemd-networkd[1046]: cali26aa3acf023: Gained carrier Jul 14 22:11:04.608592 kubelet[1999]: I0714 22:11:04.608371 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7c87d7d578-68hlv" podStartSLOduration=28.608350408 podStartE2EDuration="28.608350408s" podCreationTimestamp="2025-07-14 22:10:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:11:04.418874229 +0000 UTC m=+48.293257039" watchObservedRunningTime="2025-07-14 22:11:04.608350408 +0000 UTC m=+48.482733138" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.489 [INFO][4452] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--7cvd9-eth0 csi-node-driver- calico-system eef8fcaf-a4a7-424c-b65e-81db6db1c77a 1051 0 2025-07-14 22:10:41 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-7cvd9 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali26aa3acf023 [] [] }} ContainerID="9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" Namespace="calico-system" Pod="csi-node-driver-7cvd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--7cvd9-" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.490 [INFO][4452] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" Namespace="calico-system" Pod="csi-node-driver-7cvd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.541 [INFO][4483] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" HandleID="k8s-pod-network.9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" Workload="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.541 [INFO][4483] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" HandleID="k8s-pod-network.9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" Workload="localhost-k8s-csi--node--driver--7cvd9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a2e30), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-7cvd9", "timestamp":"2025-07-14 22:11:04.541289153 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.541 [INFO][4483] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.541 [INFO][4483] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.541 [INFO][4483] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.552 [INFO][4483] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" host="localhost" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.565 [INFO][4483] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.569 [INFO][4483] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.571 [INFO][4483] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.573 [INFO][4483] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.573 [INFO][4483] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" host="localhost" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.574 [INFO][4483] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32 Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.578 [INFO][4483] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" host="localhost" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.587 [INFO][4483] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" host="localhost" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.587 [INFO][4483] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" host="localhost" Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.587 [INFO][4483] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:04.613826 env[1215]: 2025-07-14 22:11:04.587 [INFO][4483] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" HandleID="k8s-pod-network.9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" Workload="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:04.616005 env[1215]: 2025-07-14 22:11:04.589 [INFO][4452] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" Namespace="calico-system" Pod="csi-node-driver-7cvd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--7cvd9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--7cvd9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"eef8fcaf-a4a7-424c-b65e-81db6db1c77a", ResourceVersion:"1051", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-7cvd9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali26aa3acf023", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:04.616005 env[1215]: 2025-07-14 22:11:04.590 [INFO][4452] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" Namespace="calico-system" Pod="csi-node-driver-7cvd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:04.616005 env[1215]: 2025-07-14 22:11:04.590 [INFO][4452] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali26aa3acf023 ContainerID="9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" Namespace="calico-system" Pod="csi-node-driver-7cvd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:04.616005 env[1215]: 2025-07-14 22:11:04.597 [INFO][4452] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" Namespace="calico-system" Pod="csi-node-driver-7cvd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:04.616005 env[1215]: 2025-07-14 22:11:04.598 [INFO][4452] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" Namespace="calico-system" Pod="csi-node-driver-7cvd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--7cvd9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--7cvd9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"eef8fcaf-a4a7-424c-b65e-81db6db1c77a", ResourceVersion:"1051", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32", Pod:"csi-node-driver-7cvd9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali26aa3acf023", MAC:"02:8c:6e:25:5f:8a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:04.616005 env[1215]: 2025-07-14 22:11:04.609 [INFO][4452] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32" Namespace="calico-system" Pod="csi-node-driver-7cvd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:04.626396 env[1215]: time="2025-07-14T22:11:04.626276268Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:11:04.626396 env[1215]: time="2025-07-14T22:11:04.626329428Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:11:04.626396 env[1215]: time="2025-07-14T22:11:04.626339668Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:11:04.626772 env[1215]: time="2025-07-14T22:11:04.626707790Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32 pid=4519 runtime=io.containerd.runc.v2 Jul 14 22:11:04.629000 audit[4529]: NETFILTER_CFG table=filter:119 family=2 entries=48 op=nft_register_chain pid=4529 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:04.629000 audit[4529]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23124 a0=3 a1=fffff33e87d0 a2=0 a3=ffff9fd84fa8 items=0 ppid=3397 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.633408 kernel: audit: type=1325 audit(1752531064.629:1344): table=filter:119 family=2 entries=48 op=nft_register_chain pid=4529 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:04.629000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:04.642052 systemd[1]: Started cri-containerd-9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32.scope. Jul 14 22:11:04.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.674000 audit: BPF prog-id=202 op=LOAD Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4519 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963353566353137326134363936333639663062353665636162633434 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4519 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963353566353137326134363936333639663062353665636162633434 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit: BPF prog-id=203 op=LOAD Jul 14 22:11:04.676000 audit[4530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4519 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963353566353137326134363936333639663062353665636162633434 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit: BPF prog-id=204 op=LOAD Jul 14 22:11:04.676000 audit[4530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4519 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963353566353137326134363936333639663062353665636162633434 Jul 14 22:11:04.676000 audit: BPF prog-id=204 op=UNLOAD Jul 14 22:11:04.676000 audit: BPF prog-id=203 op=UNLOAD Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.676000 audit: BPF prog-id=205 op=LOAD Jul 14 22:11:04.676000 audit[4530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4519 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963353566353137326134363936333639663062353665636162633434 Jul 14 22:11:04.678409 systemd-resolved[1153]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:11:04.693957 systemd-networkd[1046]: cali0677ebe33a2: Link UP Jul 14 22:11:04.695729 systemd-networkd[1046]: cali0677ebe33a2: Gained carrier Jul 14 22:11:04.696478 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0677ebe33a2: link becomes ready Jul 14 22:11:04.702510 env[1215]: time="2025-07-14T22:11:04.702466894Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7cvd9,Uid:eef8fcaf-a4a7-424c-b65e-81db6db1c77a,Namespace:calico-system,Attempt:1,} returns sandbox id \"9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32\"" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.534 [INFO][4463] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0 coredns-668d6bf9bc- kube-system b6800f40-1a9b-4489-93ca-766d5603dcc6 1052 0 2025-07-14 22:10:22 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-vdc7j eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali0677ebe33a2 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" Namespace="kube-system" Pod="coredns-668d6bf9bc-vdc7j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vdc7j-" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.534 [INFO][4463] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" Namespace="kube-system" Pod="coredns-668d6bf9bc-vdc7j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.583 [INFO][4494] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" HandleID="k8s-pod-network.17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" Workload="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.583 [INFO][4494] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" HandleID="k8s-pod-network.17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" Workload="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000117730), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-vdc7j", "timestamp":"2025-07-14 22:11:04.583172827 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.583 [INFO][4494] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.588 [INFO][4494] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.588 [INFO][4494] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.653 [INFO][4494] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" host="localhost" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.665 [INFO][4494] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.670 [INFO][4494] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.671 [INFO][4494] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.673 [INFO][4494] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.673 [INFO][4494] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" host="localhost" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.675 [INFO][4494] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6 Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.682 [INFO][4494] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" host="localhost" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.688 [INFO][4494] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" host="localhost" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.688 [INFO][4494] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" host="localhost" Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.688 [INFO][4494] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:04.712518 env[1215]: 2025-07-14 22:11:04.688 [INFO][4494] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" HandleID="k8s-pod-network.17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" Workload="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:04.713178 env[1215]: 2025-07-14 22:11:04.691 [INFO][4463] cni-plugin/k8s.go 418: Populated endpoint ContainerID="17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" Namespace="kube-system" Pod="coredns-668d6bf9bc-vdc7j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"b6800f40-1a9b-4489-93ca-766d5603dcc6", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-vdc7j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0677ebe33a2", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:04.713178 env[1215]: 2025-07-14 22:11:04.691 [INFO][4463] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" Namespace="kube-system" Pod="coredns-668d6bf9bc-vdc7j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:04.713178 env[1215]: 2025-07-14 22:11:04.691 [INFO][4463] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0677ebe33a2 ContainerID="17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" Namespace="kube-system" Pod="coredns-668d6bf9bc-vdc7j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:04.713178 env[1215]: 2025-07-14 22:11:04.696 [INFO][4463] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" Namespace="kube-system" Pod="coredns-668d6bf9bc-vdc7j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:04.713178 env[1215]: 2025-07-14 22:11:04.696 [INFO][4463] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" Namespace="kube-system" Pod="coredns-668d6bf9bc-vdc7j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"b6800f40-1a9b-4489-93ca-766d5603dcc6", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6", Pod:"coredns-668d6bf9bc-vdc7j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0677ebe33a2", MAC:"5a:0a:66:51:65:c0", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:04.713178 env[1215]: 2025-07-14 22:11:04.707 [INFO][4463] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6" Namespace="kube-system" Pod="coredns-668d6bf9bc-vdc7j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:04.726836 env[1215]: time="2025-07-14T22:11:04.726681149Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:11:04.726836 env[1215]: time="2025-07-14T22:11:04.726736589Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:11:04.726836 env[1215]: time="2025-07-14T22:11:04.726746469Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:11:04.727153 env[1215]: time="2025-07-14T22:11:04.726967590Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6 pid=4566 runtime=io.containerd.runc.v2 Jul 14 22:11:04.737937 systemd[1]: Started cri-containerd-17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6.scope. Jul 14 22:11:04.766000 audit[4595]: NETFILTER_CFG table=filter:120 family=2 entries=48 op=nft_register_chain pid=4595 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:04.766000 audit[4595]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22704 a0=3 a1=ffffdec1c360 a2=0 a3=ffff9229ffa8 items=0 ppid=3397 pid=4595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.766000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:04.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.773000 audit: BPF prog-id=206 op=LOAD Jul 14 22:11:04.774000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.774000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4566 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.774000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613161336361306464333435653730356137326334333432613464 Jul 14 22:11:04.774000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.774000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4566 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.774000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613161336361306464333435653730356137326334333432613464 Jul 14 22:11:04.774000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.774000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.774000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.774000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.774000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.774000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.774000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.774000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.774000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.774000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.774000 audit: BPF prog-id=207 op=LOAD Jul 14 22:11:04.774000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4566 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.774000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613161336361306464333435653730356137326334333432613464 Jul 14 22:11:04.775000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.775000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.775000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.775000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.775000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.775000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.775000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.775000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.775000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.775000 audit: BPF prog-id=208 op=LOAD Jul 14 22:11:04.775000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4566 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613161336361306464333435653730356137326334333432613464 Jul 14 22:11:04.776000 audit: BPF prog-id=208 op=UNLOAD Jul 14 22:11:04.776000 audit: BPF prog-id=207 op=UNLOAD Jul 14 22:11:04.776000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.776000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.776000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.776000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.776000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.776000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.776000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.776000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.776000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.776000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.776000 audit: BPF prog-id=209 op=LOAD Jul 14 22:11:04.776000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4566 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613161336361306464333435653730356137326334333432613464 Jul 14 22:11:04.779640 systemd-resolved[1153]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:11:04.802979 env[1215]: time="2025-07-14T22:11:04.802943455Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-vdc7j,Uid:b6800f40-1a9b-4489-93ca-766d5603dcc6,Namespace:kube-system,Attempt:1,} returns sandbox id \"17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6\"" Jul 14 22:11:04.804979 kubelet[1999]: E0714 22:11:04.803845 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:11:04.808407 env[1215]: time="2025-07-14T22:11:04.808275245Z" level=info msg="CreateContainer within sandbox \"17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 22:11:04.820493 env[1215]: time="2025-07-14T22:11:04.820437193Z" level=info msg="CreateContainer within sandbox \"17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"a8d8bf5cceaa9abb36670ee51f7ceb024634ff487c3a0a1abc9940f0b74771fb\"" Jul 14 22:11:04.822139 env[1215]: time="2025-07-14T22:11:04.821457678Z" level=info msg="StartContainer for \"a8d8bf5cceaa9abb36670ee51f7ceb024634ff487c3a0a1abc9940f0b74771fb\"" Jul 14 22:11:04.845980 systemd[1]: Started cri-containerd-a8d8bf5cceaa9abb36670ee51f7ceb024634ff487c3a0a1abc9940f0b74771fb.scope. Jul 14 22:11:04.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit: BPF prog-id=210 op=LOAD Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4566 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138643862663563636561613961626233363637306565353166376365 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4566 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138643862663563636561613961626233363637306565353166376365 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit: BPF prog-id=211 op=LOAD Jul 14 22:11:04.893000 audit[4608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4566 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138643862663563636561613961626233363637306565353166376365 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit: BPF prog-id=212 op=LOAD Jul 14 22:11:04.893000 audit[4608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4566 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138643862663563636561613961626233363637306565353166376365 Jul 14 22:11:04.893000 audit: BPF prog-id=212 op=UNLOAD Jul 14 22:11:04.893000 audit: BPF prog-id=211 op=UNLOAD Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:04.893000 audit: BPF prog-id=213 op=LOAD Jul 14 22:11:04.893000 audit[4608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4566 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:04.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138643862663563636561613961626233363637306565353166376365 Jul 14 22:11:04.920000 audit[4618]: AVC avc: denied { getattr } for pid=4618 comm="coredns" path="cgroup:[4026532659]" dev="nsfs" ino=4026532659 scontext=system_u:system_r:svirt_lxc_net_t:s0:c453,c574 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 22:11:04.920000 audit[4618]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40005b8918 a2=40001ce578 a3=0 items=0 ppid=4566 pid=4618 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c453,c574 key=(null) Jul 14 22:11:04.920000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 22:11:04.982314 env[1215]: time="2025-07-14T22:11:04.981525533Z" level=info msg="StartContainer for \"a8d8bf5cceaa9abb36670ee51f7ceb024634ff487c3a0a1abc9940f0b74771fb\" returns successfully" Jul 14 22:11:05.144536 systemd-networkd[1046]: cali7e64c216a26: Gained IPv6LL Jul 14 22:11:05.226735 env[1215]: time="2025-07-14T22:11:05.226683750Z" level=info msg="StopPodSandbox for \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\"" Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.285 [INFO][4651] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.285 [INFO][4651] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" iface="eth0" netns="/var/run/netns/cni-2f982a5d-fd9d-253a-2312-77c524fd9538" Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.286 [INFO][4651] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" iface="eth0" netns="/var/run/netns/cni-2f982a5d-fd9d-253a-2312-77c524fd9538" Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.286 [INFO][4651] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" iface="eth0" netns="/var/run/netns/cni-2f982a5d-fd9d-253a-2312-77c524fd9538" Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.286 [INFO][4651] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.286 [INFO][4651] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.326 [INFO][4659] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" HandleID="k8s-pod-network.0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.327 [INFO][4659] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.327 [INFO][4659] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.335 [WARNING][4659] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" HandleID="k8s-pod-network.0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.335 [INFO][4659] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" HandleID="k8s-pod-network.0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.340 [INFO][4659] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:05.345306 env[1215]: 2025-07-14 22:11:05.342 [INFO][4651] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:11:05.345932 env[1215]: time="2025-07-14T22:11:05.345485116Z" level=info msg="TearDown network for sandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\" successfully" Jul 14 22:11:05.345932 env[1215]: time="2025-07-14T22:11:05.345530836Z" level=info msg="StopPodSandbox for \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\" returns successfully" Jul 14 22:11:05.346752 env[1215]: time="2025-07-14T22:11:05.346714003Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c87d7d578-msz9q,Uid:d8c1108b-9df8-49ba-a271-e4b581ab48a1,Namespace:calico-apiserver,Attempt:1,}" Jul 14 22:11:05.395581 kubelet[1999]: E0714 22:11:05.393364 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:11:05.429483 kubelet[1999]: I0714 22:11:05.426672 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-vdc7j" podStartSLOduration=43.426653877 podStartE2EDuration="43.426653877s" podCreationTimestamp="2025-07-14 22:10:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:11:05.411153273 +0000 UTC m=+49.285536043" watchObservedRunningTime="2025-07-14 22:11:05.426653877 +0000 UTC m=+49.301036607" Jul 14 22:11:05.429000 audit[4683]: NETFILTER_CFG table=filter:121 family=2 entries=12 op=nft_register_rule pid=4683 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:05.429000 audit[4683]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd2b1eeb0 a2=0 a3=1 items=0 ppid=2099 pid=4683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.429000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:05.438000 audit[4683]: NETFILTER_CFG table=nat:122 family=2 entries=46 op=nft_register_rule pid=4683 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:05.438000 audit[4683]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffd2b1eeb0 a2=0 a3=1 items=0 ppid=2099 pid=4683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.438000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:05.522519 systemd-networkd[1046]: calie13b9f0c917: Link UP Jul 14 22:11:05.522862 systemd-networkd[1046]: calie13b9f0c917: Gained carrier Jul 14 22:11:05.523407 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie13b9f0c917: link becomes ready Jul 14 22:11:05.528957 systemd-networkd[1046]: cali9a0a2e6384d: Gained IPv6LL Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.418 [INFO][4668] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0 calico-apiserver-7c87d7d578- calico-apiserver d8c1108b-9df8-49ba-a271-e4b581ab48a1 1072 0 2025-07-14 22:10:36 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7c87d7d578 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7c87d7d578-msz9q eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie13b9f0c917 [] [] }} ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-msz9q" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-" Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.419 [INFO][4668] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-msz9q" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.470 [INFO][4685] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" HandleID="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.471 [INFO][4685] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" HandleID="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400034b5f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7c87d7d578-msz9q", "timestamp":"2025-07-14 22:11:05.470905158 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.471 [INFO][4685] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.471 [INFO][4685] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.471 [INFO][4685] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.484 [INFO][4685] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" host="localhost" Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.491 [INFO][4685] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.495 [INFO][4685] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.498 [INFO][4685] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.500 [INFO][4685] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.500 [INFO][4685] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" host="localhost" Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.502 [INFO][4685] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2 Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.507 [INFO][4685] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" host="localhost" Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.516 [INFO][4685] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.137/26] block=192.168.88.128/26 handle="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" host="localhost" Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.516 [INFO][4685] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.137/26] handle="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" host="localhost" Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.516 [INFO][4685] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:05.549468 env[1215]: 2025-07-14 22:11:05.516 [INFO][4685] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.137/26] IPv6=[] ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" HandleID="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:05.550046 env[1215]: 2025-07-14 22:11:05.520 [INFO][4668] cni-plugin/k8s.go 418: Populated endpoint ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-msz9q" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0", GenerateName:"calico-apiserver-7c87d7d578-", Namespace:"calico-apiserver", SelfLink:"", UID:"d8c1108b-9df8-49ba-a271-e4b581ab48a1", ResourceVersion:"1072", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c87d7d578", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7c87d7d578-msz9q", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie13b9f0c917", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:05.550046 env[1215]: 2025-07-14 22:11:05.520 [INFO][4668] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.137/32] ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-msz9q" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:05.550046 env[1215]: 2025-07-14 22:11:05.520 [INFO][4668] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie13b9f0c917 ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-msz9q" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:05.550046 env[1215]: 2025-07-14 22:11:05.522 [INFO][4668] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-msz9q" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:05.550046 env[1215]: 2025-07-14 22:11:05.524 [INFO][4668] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-msz9q" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0", GenerateName:"calico-apiserver-7c87d7d578-", Namespace:"calico-apiserver", SelfLink:"", UID:"d8c1108b-9df8-49ba-a271-e4b581ab48a1", ResourceVersion:"1072", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c87d7d578", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2", Pod:"calico-apiserver-7c87d7d578-msz9q", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie13b9f0c917", MAC:"c6:70:89:e1:00:e5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:05.550046 env[1215]: 2025-07-14 22:11:05.541 [INFO][4668] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Namespace="calico-apiserver" Pod="calico-apiserver-7c87d7d578-msz9q" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:05.561000 audit[4704]: NETFILTER_CFG table=filter:123 family=2 entries=57 op=nft_register_chain pid=4704 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:05.561000 audit[4704]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27812 a0=3 a1=fffff17fcce0 a2=0 a3=ffff9eb69fa8 items=0 ppid=3397 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.561000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:05.570189 env[1215]: time="2025-07-14T22:11:05.570087778Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:11:05.570189 env[1215]: time="2025-07-14T22:11:05.570130098Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:11:05.570189 env[1215]: time="2025-07-14T22:11:05.570139938Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:11:05.570353 env[1215]: time="2025-07-14T22:11:05.570263859Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2 pid=4712 runtime=io.containerd.runc.v2 Jul 14 22:11:05.594207 systemd[1]: Started cri-containerd-51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2.scope. Jul 14 22:11:05.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.616000 audit: BPF prog-id=214 op=LOAD Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4712 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531613864646161396661653932396266616436623133393539356232 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4712 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531613864646161396661653932396266616436623133393539356232 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit: BPF prog-id=215 op=LOAD Jul 14 22:11:05.619000 audit[4721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4712 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531613864646161396661653932396266616436623133393539356232 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit: BPF prog-id=216 op=LOAD Jul 14 22:11:05.619000 audit[4721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4712 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531613864646161396661653932396266616436623133393539356232 Jul 14 22:11:05.619000 audit: BPF prog-id=216 op=UNLOAD Jul 14 22:11:05.619000 audit: BPF prog-id=215 op=UNLOAD Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.619000 audit: BPF prog-id=217 op=LOAD Jul 14 22:11:05.619000 audit[4721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4712 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531613864646161396661653932396266616436623133393539356232 Jul 14 22:11:05.622544 systemd-resolved[1153]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:11:05.661954 env[1215]: time="2025-07-14T22:11:05.661854437Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c87d7d578-msz9q,Uid:d8c1108b-9df8-49ba-a271-e4b581ab48a1,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\"" Jul 14 22:11:05.670114 env[1215]: time="2025-07-14T22:11:05.670072762Z" level=info msg="CreateContainer within sandbox \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 22:11:05.694995 env[1215]: time="2025-07-14T22:11:05.694950097Z" level=info msg="CreateContainer within sandbox \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\"" Jul 14 22:11:05.695753 env[1215]: time="2025-07-14T22:11:05.695727901Z" level=info msg="StartContainer for \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\"" Jul 14 22:11:05.728031 systemd[1]: Started cri-containerd-bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db.scope. Jul 14 22:11:05.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.745000 audit: BPF prog-id=218 op=LOAD Jul 14 22:11:05.745000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.745000 audit[4753]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4712 pid=4753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636562326362323830613838306562613962646437333138343262 Jul 14 22:11:05.746000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.746000 audit[4753]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4712 pid=4753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636562326362323830613838306562613962646437333138343262 Jul 14 22:11:05.746000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.746000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.746000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.746000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.746000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.746000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.746000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.746000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.746000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.746000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.746000 audit: BPF prog-id=219 op=LOAD Jul 14 22:11:05.746000 audit[4753]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4712 pid=4753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636562326362323830613838306562613962646437333138343262 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit: BPF prog-id=220 op=LOAD Jul 14 22:11:05.747000 audit[4753]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4712 pid=4753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636562326362323830613838306562613962646437333138343262 Jul 14 22:11:05.747000 audit: BPF prog-id=220 op=UNLOAD Jul 14 22:11:05.747000 audit: BPF prog-id=219 op=UNLOAD Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { perfmon } for pid=4753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit[4753]: AVC avc: denied { bpf } for pid=4753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:05.747000 audit: BPF prog-id=221 op=LOAD Jul 14 22:11:05.747000 audit[4753]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4712 pid=4753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:05.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636562326362323830613838306562613962646437333138343262 Jul 14 22:11:05.763013 systemd[1]: run-containerd-runc-k8s.io-a8d8bf5cceaa9abb36670ee51f7ceb024634ff487c3a0a1abc9940f0b74771fb-runc.hTMM8w.mount: Deactivated successfully. Jul 14 22:11:05.763140 systemd[1]: run-netns-cni\x2d2f982a5d\x2dfd9d\x2d253a\x2d2312\x2d77c524fd9538.mount: Deactivated successfully. Jul 14 22:11:05.834039 env[1215]: time="2025-07-14T22:11:05.833990333Z" level=info msg="StartContainer for \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\" returns successfully" Jul 14 22:11:05.919271 env[1215]: time="2025-07-14T22:11:05.919152197Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:05.921646 env[1215]: time="2025-07-14T22:11:05.921602330Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:05.923466 env[1215]: time="2025-07-14T22:11:05.923431220Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:05.924923 env[1215]: time="2025-07-14T22:11:05.924895148Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:05.925363 env[1215]: time="2025-07-14T22:11:05.925333670Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 14 22:11:05.927040 env[1215]: time="2025-07-14T22:11:05.926975519Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 14 22:11:05.940656 env[1215]: time="2025-07-14T22:11:05.940609554Z" level=info msg="CreateContainer within sandbox \"8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 14 22:11:05.953926 env[1215]: time="2025-07-14T22:11:05.953859106Z" level=info msg="CreateContainer within sandbox \"8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"62efc308b3d237ba7d39db54ef0fb9ac78beb43170c006a03201618888870709\"" Jul 14 22:11:05.956093 env[1215]: time="2025-07-14T22:11:05.956059278Z" level=info msg="StartContainer for \"62efc308b3d237ba7d39db54ef0fb9ac78beb43170c006a03201618888870709\"" Jul 14 22:11:05.988744 systemd[1]: Started cri-containerd-62efc308b3d237ba7d39db54ef0fb9ac78beb43170c006a03201618888870709.scope. Jul 14 22:11:06.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.005000 audit: BPF prog-id=222 op=LOAD Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3923 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:06.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632656663333038623364323337626137643339646235346566306662 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3923 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:06.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632656663333038623364323337626137643339646235346566306662 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit: BPF prog-id=223 op=LOAD Jul 14 22:11:06.006000 audit[4792]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3923 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:06.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632656663333038623364323337626137643339646235346566306662 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit: BPF prog-id=224 op=LOAD Jul 14 22:11:06.006000 audit[4792]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3923 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:06.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632656663333038623364323337626137643339646235346566306662 Jul 14 22:11:06.006000 audit: BPF prog-id=224 op=UNLOAD Jul 14 22:11:06.006000 audit: BPF prog-id=223 op=UNLOAD Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { perfmon } for pid=4792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit[4792]: AVC avc: denied { bpf } for pid=4792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:06.006000 audit: BPF prog-id=225 op=LOAD Jul 14 22:11:06.006000 audit[4792]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3923 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:06.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632656663333038623364323337626137643339646235346566306662 Jul 14 22:11:06.028088 env[1215]: time="2025-07-14T22:11:06.028034745Z" level=info msg="StartContainer for \"62efc308b3d237ba7d39db54ef0fb9ac78beb43170c006a03201618888870709\" returns successfully" Jul 14 22:11:06.232485 systemd-networkd[1046]: cali26aa3acf023: Gained IPv6LL Jul 14 22:11:06.406350 kubelet[1999]: I0714 22:11:06.406300 1999 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:11:06.411069 kubelet[1999]: E0714 22:11:06.411005 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:11:06.426617 kubelet[1999]: I0714 22:11:06.426555 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7c87d7d578-msz9q" podStartSLOduration=30.426538016 podStartE2EDuration="30.426538016s" podCreationTimestamp="2025-07-14 22:10:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:11:06.416734444 +0000 UTC m=+50.291117174" watchObservedRunningTime="2025-07-14 22:11:06.426538016 +0000 UTC m=+50.300920746" Jul 14 22:11:06.430000 audit[4839]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=4839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:06.430000 audit[4839]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff7658c30 a2=0 a3=1 items=0 ppid=2099 pid=4839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:06.430000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:06.444000 audit[4839]: NETFILTER_CFG table=nat:125 family=2 entries=58 op=nft_register_chain pid=4839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:06.444000 audit[4839]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=fffff7658c30 a2=0 a3=1 items=0 ppid=2099 pid=4839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:06.444000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:06.552489 systemd-networkd[1046]: cali0677ebe33a2: Gained IPv6LL Jul 14 22:11:06.784000 audit[4352]: AVC avc: denied { watch } for pid=4352 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_10_48.1828267870/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c826 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c232,c826 tclass=file permissive=0 Jul 14 22:11:06.784000 audit[4352]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400036fb80 a2=fc6 a3=0 items=0 ppid=4264 pid=4352 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c826 key=(null) Jul 14 22:11:06.784000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:11:06.811638 kubelet[1999]: I0714 22:11:06.811513 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-64bcf76967-h67vb" podStartSLOduration=21.396418188 podStartE2EDuration="25.811497096s" podCreationTimestamp="2025-07-14 22:10:41 +0000 UTC" firstStartedPulling="2025-07-14 22:11:01.511121207 +0000 UTC m=+45.385503937" lastFinishedPulling="2025-07-14 22:11:05.926200115 +0000 UTC m=+49.800582845" observedRunningTime="2025-07-14 22:11:06.426994459 +0000 UTC m=+50.301377189" watchObservedRunningTime="2025-07-14 22:11:06.811497096 +0000 UTC m=+50.685879786" Jul 14 22:11:07.465000 audit[4864]: NETFILTER_CFG table=filter:126 family=2 entries=11 op=nft_register_rule pid=4864 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:07.465000 audit[4864]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc90ce9a0 a2=0 a3=1 items=0 ppid=2099 pid=4864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:07.465000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:07.470000 audit[4864]: NETFILTER_CFG table=nat:127 family=2 entries=29 op=nft_register_chain pid=4864 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:07.470000 audit[4864]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffc90ce9a0 a2=0 a3=1 items=0 ppid=2099 pid=4864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:07.470000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:07.512537 systemd-networkd[1046]: calie13b9f0c917: Gained IPv6LL Jul 14 22:11:07.850383 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3899752336.mount: Deactivated successfully. Jul 14 22:11:07.855000 audit[4763]: AVC avc: denied { watch } for pid=4763 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_10_48.1945643367/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c876 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c601,c876 tclass=file permissive=0 Jul 14 22:11:07.855000 audit[4763]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001e48480 a2=fc6 a3=0 items=0 ppid=4712 pid=4763 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c876 key=(null) Jul 14 22:11:07.855000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:11:08.492244 env[1215]: time="2025-07-14T22:11:08.492197966Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:08.491000 audit[4867]: NETFILTER_CFG table=filter:128 family=2 entries=10 op=nft_register_rule pid=4867 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:08.491000 audit[4867]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd1b20bd0 a2=0 a3=1 items=0 ppid=2099 pid=4867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:08.491000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:08.494189 env[1215]: time="2025-07-14T22:11:08.494152216Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:08.495713 env[1215]: time="2025-07-14T22:11:08.495676944Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:08.497229 env[1215]: time="2025-07-14T22:11:08.497190351Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:08.497724 env[1215]: time="2025-07-14T22:11:08.497690954Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 14 22:11:08.499606 env[1215]: time="2025-07-14T22:11:08.499575123Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 14 22:11:08.500444 env[1215]: time="2025-07-14T22:11:08.500324927Z" level=info msg="CreateContainer within sandbox \"436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 14 22:11:08.502000 audit[4867]: NETFILTER_CFG table=nat:129 family=2 entries=36 op=nft_register_chain pid=4867 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:08.502000 audit[4867]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffd1b20bd0 a2=0 a3=1 items=0 ppid=2099 pid=4867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:08.502000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:08.520754 env[1215]: time="2025-07-14T22:11:08.520709590Z" level=info msg="CreateContainer within sandbox \"436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"10368e580f1366013b1269016ae8f59f9d8e137a364b5a1f871dc54f443ae45d\"" Jul 14 22:11:08.521284 env[1215]: time="2025-07-14T22:11:08.521241232Z" level=info msg="StartContainer for \"10368e580f1366013b1269016ae8f59f9d8e137a364b5a1f871dc54f443ae45d\"" Jul 14 22:11:08.536687 systemd[1]: Started cri-containerd-10368e580f1366013b1269016ae8f59f9d8e137a364b5a1f871dc54f443ae45d.scope. Jul 14 22:11:08.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.558000 audit: BPF prog-id=226 op=LOAD Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4333 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:08.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130333638653538306631333636303133623132363930313661653866 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4333 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:08.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130333638653538306631333636303133623132363930313661653866 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit: BPF prog-id=227 op=LOAD Jul 14 22:11:08.559000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4333 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:08.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130333638653538306631333636303133623132363930313661653866 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit: BPF prog-id=228 op=LOAD Jul 14 22:11:08.559000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4333 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:08.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130333638653538306631333636303133623132363930313661653866 Jul 14 22:11:08.559000 audit: BPF prog-id=228 op=UNLOAD Jul 14 22:11:08.559000 audit: BPF prog-id=227 op=UNLOAD Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:08.559000 audit: BPF prog-id=229 op=LOAD Jul 14 22:11:08.559000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4333 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:08.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130333638653538306631333636303133623132363930313661653866 Jul 14 22:11:08.578383 env[1215]: time="2025-07-14T22:11:08.578311039Z" level=info msg="StartContainer for \"10368e580f1366013b1269016ae8f59f9d8e137a364b5a1f871dc54f443ae45d\" returns successfully" Jul 14 22:11:09.427756 kubelet[1999]: I0714 22:11:09.427683 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-z7ctx" podStartSLOduration=24.67969403 podStartE2EDuration="29.427667411s" podCreationTimestamp="2025-07-14 22:10:40 +0000 UTC" firstStartedPulling="2025-07-14 22:11:03.750993459 +0000 UTC m=+47.625376189" lastFinishedPulling="2025-07-14 22:11:08.49896684 +0000 UTC m=+52.373349570" observedRunningTime="2025-07-14 22:11:09.427123288 +0000 UTC m=+53.301505978" watchObservedRunningTime="2025-07-14 22:11:09.427667411 +0000 UTC m=+53.302050101" Jul 14 22:11:09.441913 kernel: kauditd_printk_skb: 440 callbacks suppressed Jul 14 22:11:09.442025 kernel: audit: type=1325 audit(1752531069.438:1484): table=filter:130 family=2 entries=10 op=nft_register_rule pid=4920 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:09.438000 audit[4920]: NETFILTER_CFG table=filter:130 family=2 entries=10 op=nft_register_rule pid=4920 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:09.441412 systemd[1]: run-containerd-runc-k8s.io-10368e580f1366013b1269016ae8f59f9d8e137a364b5a1f871dc54f443ae45d-runc.pZYZKC.mount: Deactivated successfully. Jul 14 22:11:09.438000 audit[4920]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc58198b0 a2=0 a3=1 items=0 ppid=2099 pid=4920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:09.446794 kernel: audit: type=1300 audit(1752531069.438:1484): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc58198b0 a2=0 a3=1 items=0 ppid=2099 pid=4920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:09.438000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:09.453141 kernel: audit: type=1327 audit(1752531069.438:1484): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:09.453234 kernel: audit: type=1325 audit(1752531069.447:1485): table=nat:131 family=2 entries=24 op=nft_register_rule pid=4920 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:09.447000 audit[4920]: NETFILTER_CFG table=nat:131 family=2 entries=24 op=nft_register_rule pid=4920 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:09.447000 audit[4920]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffc58198b0 a2=0 a3=1 items=0 ppid=2099 pid=4920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:09.458887 kernel: audit: type=1300 audit(1752531069.447:1485): arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffc58198b0 a2=0 a3=1 items=0 ppid=2099 pid=4920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:09.447000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:09.460926 kernel: audit: type=1327 audit(1752531069.447:1485): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:09.901946 env[1215]: time="2025-07-14T22:11:09.901891252Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:09.904085 env[1215]: time="2025-07-14T22:11:09.904039743Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:09.906036 env[1215]: time="2025-07-14T22:11:09.906011512Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:09.907365 env[1215]: time="2025-07-14T22:11:09.907332159Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:09.907753 env[1215]: time="2025-07-14T22:11:09.907725161Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 14 22:11:09.910178 env[1215]: time="2025-07-14T22:11:09.910134573Z" level=info msg="CreateContainer within sandbox \"9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 14 22:11:09.927214 env[1215]: time="2025-07-14T22:11:09.927171896Z" level=info msg="CreateContainer within sandbox \"9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"9862f8d40776ab7daf6c3bff721f295fe37292fcc2dc5c77c8d0ad8baa2442ed\"" Jul 14 22:11:09.927612 env[1215]: time="2025-07-14T22:11:09.927587538Z" level=info msg="StartContainer for \"9862f8d40776ab7daf6c3bff721f295fe37292fcc2dc5c77c8d0ad8baa2442ed\"" Jul 14 22:11:09.944138 systemd[1]: Started cri-containerd-9862f8d40776ab7daf6c3bff721f295fe37292fcc2dc5c77c8d0ad8baa2442ed.scope. Jul 14 22:11:09.969000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.969000 audit[4943]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=4519 pid=4943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:09.979144 kernel: audit: type=1400 audit(1752531069.969:1486): avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.979225 kernel: audit: type=1300 audit(1752531069.969:1486): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=4519 pid=4943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:09.979256 kernel: audit: type=1327 audit(1752531069.969:1486): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938363266386434303737366162376461663663336266663732316632 Jul 14 22:11:09.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938363266386434303737366162376461663663336266663732316632 Jul 14 22:11:09.969000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.985400 kernel: audit: type=1400 audit(1752531069.969:1487): avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.969000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.969000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.969000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.969000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.969000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.969000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.969000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.969000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.969000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.969000 audit: BPF prog-id=230 op=LOAD Jul 14 22:11:09.969000 audit[4943]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=4519 pid=4943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:09.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938363266386434303737366162376461663663336266663732316632 Jul 14 22:11:09.973000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.973000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.973000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.973000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.973000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.973000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.973000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.973000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.973000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.973000 audit: BPF prog-id=231 op=LOAD Jul 14 22:11:09.973000 audit[4943]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=4519 pid=4943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:09.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938363266386434303737366162376461663663336266663732316632 Jul 14 22:11:09.977000 audit: BPF prog-id=231 op=UNLOAD Jul 14 22:11:09.977000 audit: BPF prog-id=230 op=UNLOAD Jul 14 22:11:09.977000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.977000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.977000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.977000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.977000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.977000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.977000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.977000 audit[4943]: AVC avc: denied { perfmon } for pid=4943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.977000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.977000 audit[4943]: AVC avc: denied { bpf } for pid=4943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:09.977000 audit: BPF prog-id=232 op=LOAD Jul 14 22:11:09.977000 audit[4943]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=4519 pid=4943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:09.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938363266386434303737366162376461663663336266663732316632 Jul 14 22:11:10.017270 env[1215]: time="2025-07-14T22:11:10.017214735Z" level=info msg="StartContainer for \"9862f8d40776ab7daf6c3bff721f295fe37292fcc2dc5c77c8d0ad8baa2442ed\" returns successfully" Jul 14 22:11:10.018921 env[1215]: time="2025-07-14T22:11:10.018894943Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 14 22:11:11.317503 env[1215]: time="2025-07-14T22:11:11.317457456Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:11.320068 env[1215]: time="2025-07-14T22:11:11.320037588Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:11.322308 env[1215]: time="2025-07-14T22:11:11.322279479Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:11.323442 env[1215]: time="2025-07-14T22:11:11.323404004Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:11:11.324005 env[1215]: time="2025-07-14T22:11:11.323970927Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 14 22:11:11.326279 env[1215]: time="2025-07-14T22:11:11.326240097Z" level=info msg="CreateContainer within sandbox \"9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 14 22:11:11.336737 env[1215]: time="2025-07-14T22:11:11.336694226Z" level=info msg="CreateContainer within sandbox \"9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"56e83b661976061a490276db8eefee1419ac531cf74a14d86b316a5e01651a9e\"" Jul 14 22:11:11.338277 env[1215]: time="2025-07-14T22:11:11.338228433Z" level=info msg="StartContainer for \"56e83b661976061a490276db8eefee1419ac531cf74a14d86b316a5e01651a9e\"" Jul 14 22:11:11.360741 systemd[1]: Started cri-containerd-56e83b661976061a490276db8eefee1419ac531cf74a14d86b316a5e01651a9e.scope. Jul 14 22:11:11.378000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.378000 audit[5002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4519 pid=5002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:11.378000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536653833623636313937363036316134393032373664623865656665 Jul 14 22:11:11.378000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.378000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.378000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.378000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.378000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.378000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.378000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.378000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.378000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.378000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.378000 audit: BPF prog-id=233 op=LOAD Jul 14 22:11:11.378000 audit[5002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4519 pid=5002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:11.378000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536653833623636313937363036316134393032373664623865656665 Jul 14 22:11:11.379000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.379000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.379000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.379000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.379000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.379000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.379000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.379000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.379000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.379000 audit: BPF prog-id=234 op=LOAD Jul 14 22:11:11.379000 audit[5002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4519 pid=5002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:11.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536653833623636313937363036316134393032373664623865656665 Jul 14 22:11:11.380000 audit: BPF prog-id=234 op=UNLOAD Jul 14 22:11:11.380000 audit: BPF prog-id=233 op=UNLOAD Jul 14 22:11:11.380000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.380000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.380000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.380000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.380000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.380000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.380000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.380000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.380000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.380000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:11.380000 audit: BPF prog-id=235 op=LOAD Jul 14 22:11:11.380000 audit[5002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4519 pid=5002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:11.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536653833623636313937363036316134393032373664623865656665 Jul 14 22:11:11.395606 env[1215]: time="2025-07-14T22:11:11.395566539Z" level=info msg="StartContainer for \"56e83b661976061a490276db8eefee1419ac531cf74a14d86b316a5e01651a9e\" returns successfully" Jul 14 22:11:11.434822 kubelet[1999]: I0714 22:11:11.434140 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-7cvd9" podStartSLOduration=23.812789568 podStartE2EDuration="30.434123239s" podCreationTimestamp="2025-07-14 22:10:41 +0000 UTC" firstStartedPulling="2025-07-14 22:11:04.7036419 +0000 UTC m=+48.578024590" lastFinishedPulling="2025-07-14 22:11:11.324975571 +0000 UTC m=+55.199358261" observedRunningTime="2025-07-14 22:11:11.433979958 +0000 UTC m=+55.308362688" watchObservedRunningTime="2025-07-14 22:11:11.434123239 +0000 UTC m=+55.308505969" Jul 14 22:11:11.435284 systemd[1]: run-containerd-runc-k8s.io-56e83b661976061a490276db8eefee1419ac531cf74a14d86b316a5e01651a9e-runc.TBpwM9.mount: Deactivated successfully. Jul 14 22:11:12.301947 kubelet[1999]: I0714 22:11:12.301902 1999 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 14 22:11:12.303223 kubelet[1999]: I0714 22:11:12.303206 1999 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 14 22:11:13.463000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:13.463000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:13.463000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002687260 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:11:13.463000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002ab4960 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:11:13.463000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:11:13.463000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:11:13.598000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:13.598000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:13.598000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4011b18b70 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:11:13.598000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:11:13.598000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=401160ec00 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:11:13.598000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:11:13.604000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:13.604000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=401160ec30 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:11:13.604000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:11:13.607000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:13.607000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4012d92fa0 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:11:13.607000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:11:13.610000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:13.610000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:13.610000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4013fccd00 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:11:13.610000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4011b18bd0 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:11:13.610000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:11:13.610000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:11:16.221901 env[1215]: time="2025-07-14T22:11:16.221531256Z" level=info msg="StopPodSandbox for \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\"" Jul 14 22:11:16.319616 env[1215]: 2025-07-14 22:11:16.282 [WARNING][5052] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--7cvd9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"eef8fcaf-a4a7-424c-b65e-81db6db1c77a", ResourceVersion:"1143", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32", Pod:"csi-node-driver-7cvd9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali26aa3acf023", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:16.319616 env[1215]: 2025-07-14 22:11:16.282 [INFO][5052] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:11:16.319616 env[1215]: 2025-07-14 22:11:16.282 [INFO][5052] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" iface="eth0" netns="" Jul 14 22:11:16.319616 env[1215]: 2025-07-14 22:11:16.282 [INFO][5052] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:11:16.319616 env[1215]: 2025-07-14 22:11:16.282 [INFO][5052] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:11:16.319616 env[1215]: 2025-07-14 22:11:16.305 [INFO][5061] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" HandleID="k8s-pod-network.da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Workload="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:16.319616 env[1215]: 2025-07-14 22:11:16.305 [INFO][5061] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:16.319616 env[1215]: 2025-07-14 22:11:16.305 [INFO][5061] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:16.319616 env[1215]: 2025-07-14 22:11:16.314 [WARNING][5061] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" HandleID="k8s-pod-network.da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Workload="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:16.319616 env[1215]: 2025-07-14 22:11:16.314 [INFO][5061] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" HandleID="k8s-pod-network.da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Workload="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:16.319616 env[1215]: 2025-07-14 22:11:16.316 [INFO][5061] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:16.319616 env[1215]: 2025-07-14 22:11:16.317 [INFO][5052] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:11:16.320164 env[1215]: time="2025-07-14T22:11:16.320118939Z" level=info msg="TearDown network for sandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\" successfully" Jul 14 22:11:16.320243 env[1215]: time="2025-07-14T22:11:16.320226780Z" level=info msg="StopPodSandbox for \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\" returns successfully" Jul 14 22:11:16.320851 env[1215]: time="2025-07-14T22:11:16.320820942Z" level=info msg="RemovePodSandbox for \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\"" Jul 14 22:11:16.321055 env[1215]: time="2025-07-14T22:11:16.321002623Z" level=info msg="Forcibly stopping sandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\"" Jul 14 22:11:16.400245 env[1215]: 2025-07-14 22:11:16.358 [WARNING][5079] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--7cvd9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"eef8fcaf-a4a7-424c-b65e-81db6db1c77a", ResourceVersion:"1143", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9c55f5172a4696369f0b56ecabc44c94fe2fd12f0778010cc44a96e4cb244a32", Pod:"csi-node-driver-7cvd9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali26aa3acf023", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:16.400245 env[1215]: 2025-07-14 22:11:16.358 [INFO][5079] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:11:16.400245 env[1215]: 2025-07-14 22:11:16.358 [INFO][5079] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" iface="eth0" netns="" Jul 14 22:11:16.400245 env[1215]: 2025-07-14 22:11:16.358 [INFO][5079] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:11:16.400245 env[1215]: 2025-07-14 22:11:16.358 [INFO][5079] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:11:16.400245 env[1215]: 2025-07-14 22:11:16.381 [INFO][5088] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" HandleID="k8s-pod-network.da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Workload="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:16.400245 env[1215]: 2025-07-14 22:11:16.381 [INFO][5088] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:16.400245 env[1215]: 2025-07-14 22:11:16.381 [INFO][5088] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:16.400245 env[1215]: 2025-07-14 22:11:16.392 [WARNING][5088] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" HandleID="k8s-pod-network.da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Workload="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:16.400245 env[1215]: 2025-07-14 22:11:16.392 [INFO][5088] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" HandleID="k8s-pod-network.da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Workload="localhost-k8s-csi--node--driver--7cvd9-eth0" Jul 14 22:11:16.400245 env[1215]: 2025-07-14 22:11:16.394 [INFO][5088] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:16.400245 env[1215]: 2025-07-14 22:11:16.397 [INFO][5079] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539" Jul 14 22:11:16.400868 env[1215]: time="2025-07-14T22:11:16.400833110Z" level=info msg="TearDown network for sandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\" successfully" Jul 14 22:11:16.421136 env[1215]: time="2025-07-14T22:11:16.421089872Z" level=info msg="RemovePodSandbox \"da5ae15c57a56c2fe32d34b32b6c5299adad797078c5295d55f06a4db0484539\" returns successfully" Jul 14 22:11:16.421787 env[1215]: time="2025-07-14T22:11:16.421757275Z" level=info msg="StopPodSandbox for \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\"" Jul 14 22:11:16.500650 env[1215]: 2025-07-14 22:11:16.463 [WARNING][5113] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0", GenerateName:"calico-apiserver-7c87d7d578-", Namespace:"calico-apiserver", SelfLink:"", UID:"6c50cb2a-3c39-4f9d-91d6-7f2c4d312652", ResourceVersion:"1102", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c87d7d578", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4", Pod:"calico-apiserver-7c87d7d578-68hlv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7e64c216a26", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:16.500650 env[1215]: 2025-07-14 22:11:16.463 [INFO][5113] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:11:16.500650 env[1215]: 2025-07-14 22:11:16.463 [INFO][5113] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" iface="eth0" netns="" Jul 14 22:11:16.500650 env[1215]: 2025-07-14 22:11:16.463 [INFO][5113] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:11:16.500650 env[1215]: 2025-07-14 22:11:16.463 [INFO][5113] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:11:16.500650 env[1215]: 2025-07-14 22:11:16.483 [INFO][5121] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" HandleID="k8s-pod-network.27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:16.500650 env[1215]: 2025-07-14 22:11:16.483 [INFO][5121] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:16.500650 env[1215]: 2025-07-14 22:11:16.483 [INFO][5121] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:16.500650 env[1215]: 2025-07-14 22:11:16.493 [WARNING][5121] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" HandleID="k8s-pod-network.27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:16.500650 env[1215]: 2025-07-14 22:11:16.493 [INFO][5121] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" HandleID="k8s-pod-network.27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:16.500650 env[1215]: 2025-07-14 22:11:16.497 [INFO][5121] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:16.500650 env[1215]: 2025-07-14 22:11:16.498 [INFO][5113] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:11:16.501183 env[1215]: time="2025-07-14T22:11:16.501148960Z" level=info msg="TearDown network for sandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\" successfully" Jul 14 22:11:16.501253 env[1215]: time="2025-07-14T22:11:16.501237720Z" level=info msg="StopPodSandbox for \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\" returns successfully" Jul 14 22:11:16.501984 env[1215]: time="2025-07-14T22:11:16.501954923Z" level=info msg="RemovePodSandbox for \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\"" Jul 14 22:11:16.502067 env[1215]: time="2025-07-14T22:11:16.502006484Z" level=info msg="Forcibly stopping sandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\"" Jul 14 22:11:16.576150 env[1215]: 2025-07-14 22:11:16.541 [WARNING][5139] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0", GenerateName:"calico-apiserver-7c87d7d578-", Namespace:"calico-apiserver", SelfLink:"", UID:"6c50cb2a-3c39-4f9d-91d6-7f2c4d312652", ResourceVersion:"1102", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c87d7d578", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4", Pod:"calico-apiserver-7c87d7d578-68hlv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7e64c216a26", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:16.576150 env[1215]: 2025-07-14 22:11:16.541 [INFO][5139] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:11:16.576150 env[1215]: 2025-07-14 22:11:16.541 [INFO][5139] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" iface="eth0" netns="" Jul 14 22:11:16.576150 env[1215]: 2025-07-14 22:11:16.541 [INFO][5139] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:11:16.576150 env[1215]: 2025-07-14 22:11:16.541 [INFO][5139] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:11:16.576150 env[1215]: 2025-07-14 22:11:16.561 [INFO][5148] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" HandleID="k8s-pod-network.27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:16.576150 env[1215]: 2025-07-14 22:11:16.561 [INFO][5148] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:16.576150 env[1215]: 2025-07-14 22:11:16.561 [INFO][5148] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:16.576150 env[1215]: 2025-07-14 22:11:16.570 [WARNING][5148] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" HandleID="k8s-pod-network.27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:16.576150 env[1215]: 2025-07-14 22:11:16.570 [INFO][5148] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" HandleID="k8s-pod-network.27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:16.576150 env[1215]: 2025-07-14 22:11:16.572 [INFO][5148] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:16.576150 env[1215]: 2025-07-14 22:11:16.574 [INFO][5139] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99" Jul 14 22:11:16.577372 env[1215]: time="2025-07-14T22:11:16.577324312Z" level=info msg="TearDown network for sandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\" successfully" Jul 14 22:11:16.581721 env[1215]: time="2025-07-14T22:11:16.581678369Z" level=info msg="RemovePodSandbox \"27eb68217399f8424faa22720ed1d7d6eb576cd0ec22a90625dc8604583c2d99\" returns successfully" Jul 14 22:11:16.582494 env[1215]: time="2025-07-14T22:11:16.582458573Z" level=info msg="StopPodSandbox for \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\"" Jul 14 22:11:16.656507 env[1215]: 2025-07-14 22:11:16.619 [WARNING][5166] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"e5244a42-16bb-47e0-a9b1-018b075643ee", ResourceVersion:"1029", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9", Pod:"coredns-668d6bf9bc-4b2tn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6d7bc0b482e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:16.656507 env[1215]: 2025-07-14 22:11:16.619 [INFO][5166] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:11:16.656507 env[1215]: 2025-07-14 22:11:16.619 [INFO][5166] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" iface="eth0" netns="" Jul 14 22:11:16.656507 env[1215]: 2025-07-14 22:11:16.619 [INFO][5166] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:11:16.656507 env[1215]: 2025-07-14 22:11:16.619 [INFO][5166] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:11:16.656507 env[1215]: 2025-07-14 22:11:16.640 [INFO][5174] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" HandleID="k8s-pod-network.65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Workload="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:16.656507 env[1215]: 2025-07-14 22:11:16.640 [INFO][5174] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:16.656507 env[1215]: 2025-07-14 22:11:16.640 [INFO][5174] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:16.656507 env[1215]: 2025-07-14 22:11:16.650 [WARNING][5174] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" HandleID="k8s-pod-network.65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Workload="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:16.656507 env[1215]: 2025-07-14 22:11:16.650 [INFO][5174] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" HandleID="k8s-pod-network.65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Workload="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:16.656507 env[1215]: 2025-07-14 22:11:16.653 [INFO][5174] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:16.656507 env[1215]: 2025-07-14 22:11:16.654 [INFO][5166] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:11:16.657702 env[1215]: time="2025-07-14T22:11:16.657664480Z" level=info msg="TearDown network for sandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\" successfully" Jul 14 22:11:16.657788 env[1215]: time="2025-07-14T22:11:16.657772001Z" level=info msg="StopPodSandbox for \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\" returns successfully" Jul 14 22:11:16.658830 env[1215]: time="2025-07-14T22:11:16.658792245Z" level=info msg="RemovePodSandbox for \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\"" Jul 14 22:11:16.658924 env[1215]: time="2025-07-14T22:11:16.658865365Z" level=info msg="Forcibly stopping sandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\"" Jul 14 22:11:16.734552 env[1215]: 2025-07-14 22:11:16.699 [WARNING][5192] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"e5244a42-16bb-47e0-a9b1-018b075643ee", ResourceVersion:"1029", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c663ef929d6d260b23bfd55e9726e7cce76fa83d50eeeae12e6e1c00fbeb81b9", Pod:"coredns-668d6bf9bc-4b2tn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6d7bc0b482e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:16.734552 env[1215]: 2025-07-14 22:11:16.699 [INFO][5192] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:11:16.734552 env[1215]: 2025-07-14 22:11:16.700 [INFO][5192] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" iface="eth0" netns="" Jul 14 22:11:16.734552 env[1215]: 2025-07-14 22:11:16.700 [INFO][5192] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:11:16.734552 env[1215]: 2025-07-14 22:11:16.700 [INFO][5192] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:11:16.734552 env[1215]: 2025-07-14 22:11:16.719 [INFO][5202] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" HandleID="k8s-pod-network.65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Workload="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:16.734552 env[1215]: 2025-07-14 22:11:16.719 [INFO][5202] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:16.734552 env[1215]: 2025-07-14 22:11:16.719 [INFO][5202] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:16.734552 env[1215]: 2025-07-14 22:11:16.729 [WARNING][5202] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" HandleID="k8s-pod-network.65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Workload="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:16.734552 env[1215]: 2025-07-14 22:11:16.729 [INFO][5202] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" HandleID="k8s-pod-network.65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Workload="localhost-k8s-coredns--668d6bf9bc--4b2tn-eth0" Jul 14 22:11:16.734552 env[1215]: 2025-07-14 22:11:16.731 [INFO][5202] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:16.734552 env[1215]: 2025-07-14 22:11:16.733 [INFO][5192] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857" Jul 14 22:11:16.734999 env[1215]: time="2025-07-14T22:11:16.734590475Z" level=info msg="TearDown network for sandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\" successfully" Jul 14 22:11:16.737837 env[1215]: time="2025-07-14T22:11:16.737793968Z" level=info msg="RemovePodSandbox \"65a8cae33a315e71044f1f2a58e98b555565348b3a00967b3bdb817de842c857\" returns successfully" Jul 14 22:11:16.738286 env[1215]: time="2025-07-14T22:11:16.738252890Z" level=info msg="StopPodSandbox for \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\"" Jul 14 22:11:16.804290 env[1215]: 2025-07-14 22:11:16.771 [WARNING][5220] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"c5224d5a-68ce-4d91-9c1a-81aee0017fc6", ResourceVersion:"1128", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c", Pod:"goldmane-768f4c5c69-z7ctx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali9a0a2e6384d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:16.804290 env[1215]: 2025-07-14 22:11:16.771 [INFO][5220] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:11:16.804290 env[1215]: 2025-07-14 22:11:16.771 [INFO][5220] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" iface="eth0" netns="" Jul 14 22:11:16.804290 env[1215]: 2025-07-14 22:11:16.771 [INFO][5220] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:11:16.804290 env[1215]: 2025-07-14 22:11:16.771 [INFO][5220] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:11:16.804290 env[1215]: 2025-07-14 22:11:16.790 [INFO][5229] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" HandleID="k8s-pod-network.e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Workload="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:16.804290 env[1215]: 2025-07-14 22:11:16.790 [INFO][5229] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:16.804290 env[1215]: 2025-07-14 22:11:16.790 [INFO][5229] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:16.804290 env[1215]: 2025-07-14 22:11:16.799 [WARNING][5229] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" HandleID="k8s-pod-network.e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Workload="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:16.804290 env[1215]: 2025-07-14 22:11:16.799 [INFO][5229] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" HandleID="k8s-pod-network.e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Workload="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:16.804290 env[1215]: 2025-07-14 22:11:16.800 [INFO][5229] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:16.804290 env[1215]: 2025-07-14 22:11:16.802 [INFO][5220] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:11:16.804850 env[1215]: time="2025-07-14T22:11:16.804811162Z" level=info msg="TearDown network for sandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\" successfully" Jul 14 22:11:16.804924 env[1215]: time="2025-07-14T22:11:16.804905443Z" level=info msg="StopPodSandbox for \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\" returns successfully" Jul 14 22:11:16.805746 env[1215]: time="2025-07-14T22:11:16.805695366Z" level=info msg="RemovePodSandbox for \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\"" Jul 14 22:11:16.805840 env[1215]: time="2025-07-14T22:11:16.805755446Z" level=info msg="Forcibly stopping sandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\"" Jul 14 22:11:16.875435 env[1215]: 2025-07-14 22:11:16.841 [WARNING][5248] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"c5224d5a-68ce-4d91-9c1a-81aee0017fc6", ResourceVersion:"1128", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"436641bd4cb3e60e256b39d588658453376687873eddd919714fbbdaafeabb2c", Pod:"goldmane-768f4c5c69-z7ctx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali9a0a2e6384d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:16.875435 env[1215]: 2025-07-14 22:11:16.842 [INFO][5248] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:11:16.875435 env[1215]: 2025-07-14 22:11:16.842 [INFO][5248] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" iface="eth0" netns="" Jul 14 22:11:16.875435 env[1215]: 2025-07-14 22:11:16.842 [INFO][5248] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:11:16.875435 env[1215]: 2025-07-14 22:11:16.842 [INFO][5248] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:11:16.875435 env[1215]: 2025-07-14 22:11:16.861 [INFO][5257] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" HandleID="k8s-pod-network.e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Workload="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:16.875435 env[1215]: 2025-07-14 22:11:16.861 [INFO][5257] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:16.875435 env[1215]: 2025-07-14 22:11:16.861 [INFO][5257] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:16.875435 env[1215]: 2025-07-14 22:11:16.870 [WARNING][5257] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" HandleID="k8s-pod-network.e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Workload="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:16.875435 env[1215]: 2025-07-14 22:11:16.870 [INFO][5257] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" HandleID="k8s-pod-network.e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Workload="localhost-k8s-goldmane--768f4c5c69--z7ctx-eth0" Jul 14 22:11:16.875435 env[1215]: 2025-07-14 22:11:16.872 [INFO][5257] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:16.875435 env[1215]: 2025-07-14 22:11:16.874 [INFO][5248] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562" Jul 14 22:11:16.875996 env[1215]: time="2025-07-14T22:11:16.875957733Z" level=info msg="TearDown network for sandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\" successfully" Jul 14 22:11:16.879354 env[1215]: time="2025-07-14T22:11:16.879307947Z" level=info msg="RemovePodSandbox \"e40425ca9ea8eedf0c78d765e40d4e04bb794f2b9114308869349465211cc562\" returns successfully" Jul 14 22:11:16.880049 env[1215]: time="2025-07-14T22:11:16.880014030Z" level=info msg="StopPodSandbox for \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\"" Jul 14 22:11:16.955742 env[1215]: 2025-07-14 22:11:16.920 [WARNING][5275] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0", GenerateName:"calico-kube-controllers-64bcf76967-", Namespace:"calico-system", SelfLink:"", UID:"d74727d3-06bd-4249-8964-7a335825fdf9", ResourceVersion:"1109", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"64bcf76967", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41", Pod:"calico-kube-controllers-64bcf76967-h67vb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif050fed0ee5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:16.955742 env[1215]: 2025-07-14 22:11:16.920 [INFO][5275] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:11:16.955742 env[1215]: 2025-07-14 22:11:16.920 [INFO][5275] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" iface="eth0" netns="" Jul 14 22:11:16.955742 env[1215]: 2025-07-14 22:11:16.920 [INFO][5275] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:11:16.955742 env[1215]: 2025-07-14 22:11:16.920 [INFO][5275] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:11:16.955742 env[1215]: 2025-07-14 22:11:16.940 [INFO][5283] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" HandleID="k8s-pod-network.212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Workload="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:16.955742 env[1215]: 2025-07-14 22:11:16.941 [INFO][5283] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:16.955742 env[1215]: 2025-07-14 22:11:16.941 [INFO][5283] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:16.955742 env[1215]: 2025-07-14 22:11:16.949 [WARNING][5283] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" HandleID="k8s-pod-network.212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Workload="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:16.955742 env[1215]: 2025-07-14 22:11:16.949 [INFO][5283] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" HandleID="k8s-pod-network.212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Workload="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:16.955742 env[1215]: 2025-07-14 22:11:16.951 [INFO][5283] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:16.955742 env[1215]: 2025-07-14 22:11:16.953 [INFO][5275] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:11:16.956304 env[1215]: time="2025-07-14T22:11:16.956268062Z" level=info msg="TearDown network for sandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\" successfully" Jul 14 22:11:16.956408 env[1215]: time="2025-07-14T22:11:16.956370542Z" level=info msg="StopPodSandbox for \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\" returns successfully" Jul 14 22:11:16.957103 env[1215]: time="2025-07-14T22:11:16.956955465Z" level=info msg="RemovePodSandbox for \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\"" Jul 14 22:11:16.957103 env[1215]: time="2025-07-14T22:11:16.956995025Z" level=info msg="Forcibly stopping sandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\"" Jul 14 22:11:17.032696 env[1215]: 2025-07-14 22:11:16.991 [WARNING][5301] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0", GenerateName:"calico-kube-controllers-64bcf76967-", Namespace:"calico-system", SelfLink:"", UID:"d74727d3-06bd-4249-8964-7a335825fdf9", ResourceVersion:"1109", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"64bcf76967", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8b70375417f75de2386d5ea68a9112ae5eccf5365cba396c7bd45815d4fbcf41", Pod:"calico-kube-controllers-64bcf76967-h67vb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif050fed0ee5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:17.032696 env[1215]: 2025-07-14 22:11:16.992 [INFO][5301] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:11:17.032696 env[1215]: 2025-07-14 22:11:16.992 [INFO][5301] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" iface="eth0" netns="" Jul 14 22:11:17.032696 env[1215]: 2025-07-14 22:11:16.992 [INFO][5301] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:11:17.032696 env[1215]: 2025-07-14 22:11:16.992 [INFO][5301] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:11:17.032696 env[1215]: 2025-07-14 22:11:17.018 [INFO][5310] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" HandleID="k8s-pod-network.212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Workload="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:17.032696 env[1215]: 2025-07-14 22:11:17.018 [INFO][5310] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:17.032696 env[1215]: 2025-07-14 22:11:17.018 [INFO][5310] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:17.032696 env[1215]: 2025-07-14 22:11:17.027 [WARNING][5310] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" HandleID="k8s-pod-network.212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Workload="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:17.032696 env[1215]: 2025-07-14 22:11:17.027 [INFO][5310] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" HandleID="k8s-pod-network.212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Workload="localhost-k8s-calico--kube--controllers--64bcf76967--h67vb-eth0" Jul 14 22:11:17.032696 env[1215]: 2025-07-14 22:11:17.029 [INFO][5310] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:17.032696 env[1215]: 2025-07-14 22:11:17.031 [INFO][5301] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2" Jul 14 22:11:17.033207 env[1215]: time="2025-07-14T22:11:17.033172494Z" level=info msg="TearDown network for sandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\" successfully" Jul 14 22:11:17.036502 env[1215]: time="2025-07-14T22:11:17.036464627Z" level=info msg="RemovePodSandbox \"212d8559eb9793cf98fe48b951e630f4e2c3dc2980c798db3d9c7a701c0685e2\" returns successfully" Jul 14 22:11:17.037101 env[1215]: time="2025-07-14T22:11:17.037076109Z" level=info msg="StopPodSandbox for \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\"" Jul 14 22:11:17.104962 env[1215]: 2025-07-14 22:11:17.069 [WARNING][5327] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" WorkloadEndpoint="localhost-k8s-whisker--86b44b5b85--vwhfb-eth0" Jul 14 22:11:17.104962 env[1215]: 2025-07-14 22:11:17.069 [INFO][5327] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:11:17.104962 env[1215]: 2025-07-14 22:11:17.069 [INFO][5327] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" iface="eth0" netns="" Jul 14 22:11:17.104962 env[1215]: 2025-07-14 22:11:17.069 [INFO][5327] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:11:17.104962 env[1215]: 2025-07-14 22:11:17.069 [INFO][5327] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:11:17.104962 env[1215]: 2025-07-14 22:11:17.090 [INFO][5336] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" HandleID="k8s-pod-network.8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Workload="localhost-k8s-whisker--86b44b5b85--vwhfb-eth0" Jul 14 22:11:17.104962 env[1215]: 2025-07-14 22:11:17.090 [INFO][5336] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:17.104962 env[1215]: 2025-07-14 22:11:17.090 [INFO][5336] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:17.104962 env[1215]: 2025-07-14 22:11:17.099 [WARNING][5336] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" HandleID="k8s-pod-network.8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Workload="localhost-k8s-whisker--86b44b5b85--vwhfb-eth0" Jul 14 22:11:17.104962 env[1215]: 2025-07-14 22:11:17.099 [INFO][5336] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" HandleID="k8s-pod-network.8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Workload="localhost-k8s-whisker--86b44b5b85--vwhfb-eth0" Jul 14 22:11:17.104962 env[1215]: 2025-07-14 22:11:17.101 [INFO][5336] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:17.104962 env[1215]: 2025-07-14 22:11:17.103 [INFO][5327] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:11:17.105580 env[1215]: time="2025-07-14T22:11:17.104995380Z" level=info msg="TearDown network for sandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\" successfully" Jul 14 22:11:17.105580 env[1215]: time="2025-07-14T22:11:17.105028620Z" level=info msg="StopPodSandbox for \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\" returns successfully" Jul 14 22:11:17.105580 env[1215]: time="2025-07-14T22:11:17.105532342Z" level=info msg="RemovePodSandbox for \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\"" Jul 14 22:11:17.105654 env[1215]: time="2025-07-14T22:11:17.105566502Z" level=info msg="Forcibly stopping sandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\"" Jul 14 22:11:17.171088 env[1215]: 2025-07-14 22:11:17.137 [WARNING][5354] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" WorkloadEndpoint="localhost-k8s-whisker--86b44b5b85--vwhfb-eth0" Jul 14 22:11:17.171088 env[1215]: 2025-07-14 22:11:17.137 [INFO][5354] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:11:17.171088 env[1215]: 2025-07-14 22:11:17.137 [INFO][5354] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" iface="eth0" netns="" Jul 14 22:11:17.171088 env[1215]: 2025-07-14 22:11:17.137 [INFO][5354] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:11:17.171088 env[1215]: 2025-07-14 22:11:17.137 [INFO][5354] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:11:17.171088 env[1215]: 2025-07-14 22:11:17.156 [INFO][5363] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" HandleID="k8s-pod-network.8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Workload="localhost-k8s-whisker--86b44b5b85--vwhfb-eth0" Jul 14 22:11:17.171088 env[1215]: 2025-07-14 22:11:17.156 [INFO][5363] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:17.171088 env[1215]: 2025-07-14 22:11:17.157 [INFO][5363] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:17.171088 env[1215]: 2025-07-14 22:11:17.166 [WARNING][5363] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" HandleID="k8s-pod-network.8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Workload="localhost-k8s-whisker--86b44b5b85--vwhfb-eth0" Jul 14 22:11:17.171088 env[1215]: 2025-07-14 22:11:17.166 [INFO][5363] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" HandleID="k8s-pod-network.8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Workload="localhost-k8s-whisker--86b44b5b85--vwhfb-eth0" Jul 14 22:11:17.171088 env[1215]: 2025-07-14 22:11:17.167 [INFO][5363] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:17.171088 env[1215]: 2025-07-14 22:11:17.169 [INFO][5354] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7" Jul 14 22:11:17.171529 env[1215]: time="2025-07-14T22:11:17.171122364Z" level=info msg="TearDown network for sandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\" successfully" Jul 14 22:11:17.174231 env[1215]: time="2025-07-14T22:11:17.174187736Z" level=info msg="RemovePodSandbox \"8b1177f83472de181814a21e2b2c7ac3e7093b0f4646fc64ea69b286bb7953c7\" returns successfully" Jul 14 22:11:17.174908 env[1215]: time="2025-07-14T22:11:17.174878499Z" level=info msg="StopPodSandbox for \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\"" Jul 14 22:11:17.256666 env[1215]: 2025-07-14 22:11:17.207 [WARNING][5381] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"b6800f40-1a9b-4489-93ca-766d5603dcc6", ResourceVersion:"1078", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6", Pod:"coredns-668d6bf9bc-vdc7j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0677ebe33a2", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:17.256666 env[1215]: 2025-07-14 22:11:17.208 [INFO][5381] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:11:17.256666 env[1215]: 2025-07-14 22:11:17.208 [INFO][5381] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" iface="eth0" netns="" Jul 14 22:11:17.256666 env[1215]: 2025-07-14 22:11:17.208 [INFO][5381] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:11:17.256666 env[1215]: 2025-07-14 22:11:17.208 [INFO][5381] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:11:17.256666 env[1215]: 2025-07-14 22:11:17.237 [INFO][5390] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" HandleID="k8s-pod-network.29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Workload="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:17.256666 env[1215]: 2025-07-14 22:11:17.238 [INFO][5390] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:17.256666 env[1215]: 2025-07-14 22:11:17.238 [INFO][5390] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:17.256666 env[1215]: 2025-07-14 22:11:17.247 [WARNING][5390] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" HandleID="k8s-pod-network.29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Workload="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:17.256666 env[1215]: 2025-07-14 22:11:17.247 [INFO][5390] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" HandleID="k8s-pod-network.29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Workload="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:17.256666 env[1215]: 2025-07-14 22:11:17.249 [INFO][5390] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:17.256666 env[1215]: 2025-07-14 22:11:17.251 [INFO][5381] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:11:17.256666 env[1215]: time="2025-07-14T22:11:17.256631745Z" level=info msg="TearDown network for sandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\" successfully" Jul 14 22:11:17.256666 env[1215]: time="2025-07-14T22:11:17.256665825Z" level=info msg="StopPodSandbox for \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\" returns successfully" Jul 14 22:11:17.257369 env[1215]: time="2025-07-14T22:11:17.257064867Z" level=info msg="RemovePodSandbox for \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\"" Jul 14 22:11:17.257369 env[1215]: time="2025-07-14T22:11:17.257099867Z" level=info msg="Forcibly stopping sandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\"" Jul 14 22:11:17.324522 env[1215]: 2025-07-14 22:11:17.289 [WARNING][5407] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"b6800f40-1a9b-4489-93ca-766d5603dcc6", ResourceVersion:"1078", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"17a1a3ca0dd345e705a72c4342a4d1d7a3603b528d3f097dd6ad9e12a4b55db6", Pod:"coredns-668d6bf9bc-vdc7j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0677ebe33a2", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:17.324522 env[1215]: 2025-07-14 22:11:17.289 [INFO][5407] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:11:17.324522 env[1215]: 2025-07-14 22:11:17.289 [INFO][5407] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" iface="eth0" netns="" Jul 14 22:11:17.324522 env[1215]: 2025-07-14 22:11:17.289 [INFO][5407] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:11:17.324522 env[1215]: 2025-07-14 22:11:17.289 [INFO][5407] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:11:17.324522 env[1215]: 2025-07-14 22:11:17.309 [INFO][5416] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" HandleID="k8s-pod-network.29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Workload="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:17.324522 env[1215]: 2025-07-14 22:11:17.309 [INFO][5416] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:17.324522 env[1215]: 2025-07-14 22:11:17.309 [INFO][5416] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:17.324522 env[1215]: 2025-07-14 22:11:17.318 [WARNING][5416] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" HandleID="k8s-pod-network.29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Workload="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:17.324522 env[1215]: 2025-07-14 22:11:17.318 [INFO][5416] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" HandleID="k8s-pod-network.29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Workload="localhost-k8s-coredns--668d6bf9bc--vdc7j-eth0" Jul 14 22:11:17.324522 env[1215]: 2025-07-14 22:11:17.320 [INFO][5416] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:17.324522 env[1215]: 2025-07-14 22:11:17.322 [INFO][5407] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98" Jul 14 22:11:17.325148 env[1215]: time="2025-07-14T22:11:17.325111819Z" level=info msg="TearDown network for sandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\" successfully" Jul 14 22:11:17.328248 env[1215]: time="2025-07-14T22:11:17.328208671Z" level=info msg="RemovePodSandbox \"29b152d2459b4221528016441fc744a495554e98a45043e09d935753cc221c98\" returns successfully" Jul 14 22:11:17.328916 env[1215]: time="2025-07-14T22:11:17.328883994Z" level=info msg="StopPodSandbox for \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\"" Jul 14 22:11:17.404914 env[1215]: 2025-07-14 22:11:17.361 [WARNING][5434] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0", GenerateName:"calico-apiserver-6cfff6787d-", Namespace:"calico-apiserver", SelfLink:"", UID:"f5a3fd3e-f137-4577-886c-7cb3c9ae091a", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6cfff6787d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93", Pod:"calico-apiserver-6cfff6787d-9cqb9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali928abdbb95f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:17.404914 env[1215]: 2025-07-14 22:11:17.362 [INFO][5434] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:11:17.404914 env[1215]: 2025-07-14 22:11:17.362 [INFO][5434] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" iface="eth0" netns="" Jul 14 22:11:17.404914 env[1215]: 2025-07-14 22:11:17.362 [INFO][5434] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:11:17.404914 env[1215]: 2025-07-14 22:11:17.362 [INFO][5434] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:11:17.404914 env[1215]: 2025-07-14 22:11:17.390 [INFO][5442] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" HandleID="k8s-pod-network.0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Workload="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:17.404914 env[1215]: 2025-07-14 22:11:17.390 [INFO][5442] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:17.404914 env[1215]: 2025-07-14 22:11:17.390 [INFO][5442] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:17.404914 env[1215]: 2025-07-14 22:11:17.399 [WARNING][5442] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" HandleID="k8s-pod-network.0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Workload="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:17.404914 env[1215]: 2025-07-14 22:11:17.399 [INFO][5442] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" HandleID="k8s-pod-network.0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Workload="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:17.404914 env[1215]: 2025-07-14 22:11:17.401 [INFO][5442] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:17.404914 env[1215]: 2025-07-14 22:11:17.403 [INFO][5434] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:11:17.405600 env[1215]: time="2025-07-14T22:11:17.405513939Z" level=info msg="TearDown network for sandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\" successfully" Jul 14 22:11:17.405719 env[1215]: time="2025-07-14T22:11:17.405683300Z" level=info msg="StopPodSandbox for \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\" returns successfully" Jul 14 22:11:17.409165 env[1215]: time="2025-07-14T22:11:17.409120314Z" level=info msg="RemovePodSandbox for \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\"" Jul 14 22:11:17.409263 env[1215]: time="2025-07-14T22:11:17.409166794Z" level=info msg="Forcibly stopping sandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\"" Jul 14 22:11:17.487946 env[1215]: 2025-07-14 22:11:17.453 [WARNING][5459] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0", GenerateName:"calico-apiserver-6cfff6787d-", Namespace:"calico-apiserver", SelfLink:"", UID:"f5a3fd3e-f137-4577-886c-7cb3c9ae091a", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6cfff6787d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a130e9335912edcef0e33712cb8abd06eeb07533c082c174b659178cb3827b93", Pod:"calico-apiserver-6cfff6787d-9cqb9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali928abdbb95f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:17.487946 env[1215]: 2025-07-14 22:11:17.453 [INFO][5459] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:11:17.487946 env[1215]: 2025-07-14 22:11:17.453 [INFO][5459] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" iface="eth0" netns="" Jul 14 22:11:17.487946 env[1215]: 2025-07-14 22:11:17.453 [INFO][5459] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:11:17.487946 env[1215]: 2025-07-14 22:11:17.453 [INFO][5459] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:11:17.487946 env[1215]: 2025-07-14 22:11:17.472 [INFO][5468] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" HandleID="k8s-pod-network.0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Workload="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:17.487946 env[1215]: 2025-07-14 22:11:17.472 [INFO][5468] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:17.487946 env[1215]: 2025-07-14 22:11:17.472 [INFO][5468] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:17.487946 env[1215]: 2025-07-14 22:11:17.482 [WARNING][5468] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" HandleID="k8s-pod-network.0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Workload="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:17.487946 env[1215]: 2025-07-14 22:11:17.482 [INFO][5468] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" HandleID="k8s-pod-network.0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Workload="localhost-k8s-calico--apiserver--6cfff6787d--9cqb9-eth0" Jul 14 22:11:17.487946 env[1215]: 2025-07-14 22:11:17.484 [INFO][5468] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:17.487946 env[1215]: 2025-07-14 22:11:17.486 [INFO][5459] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5" Jul 14 22:11:17.488557 env[1215]: time="2025-07-14T22:11:17.487981708Z" level=info msg="TearDown network for sandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\" successfully" Jul 14 22:11:17.511561 env[1215]: time="2025-07-14T22:11:17.511510082Z" level=info msg="RemovePodSandbox \"0bed39c5374f90c65d1cb8ee35d9583a43dbacdbaf077b5db1f1b8079fd881b5\" returns successfully" Jul 14 22:11:17.512140 env[1215]: time="2025-07-14T22:11:17.512111485Z" level=info msg="StopPodSandbox for \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\"" Jul 14 22:11:17.584497 env[1215]: 2025-07-14 22:11:17.548 [WARNING][5486] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0", GenerateName:"calico-apiserver-7c87d7d578-", Namespace:"calico-apiserver", SelfLink:"", UID:"d8c1108b-9df8-49ba-a271-e4b581ab48a1", ResourceVersion:"1115", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c87d7d578", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2", Pod:"calico-apiserver-7c87d7d578-msz9q", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie13b9f0c917", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:17.584497 env[1215]: 2025-07-14 22:11:17.548 [INFO][5486] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:11:17.584497 env[1215]: 2025-07-14 22:11:17.548 [INFO][5486] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" iface="eth0" netns="" Jul 14 22:11:17.584497 env[1215]: 2025-07-14 22:11:17.548 [INFO][5486] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:11:17.584497 env[1215]: 2025-07-14 22:11:17.548 [INFO][5486] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:11:17.584497 env[1215]: 2025-07-14 22:11:17.571 [INFO][5495] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" HandleID="k8s-pod-network.0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:17.584497 env[1215]: 2025-07-14 22:11:17.571 [INFO][5495] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:17.584497 env[1215]: 2025-07-14 22:11:17.571 [INFO][5495] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:17.584497 env[1215]: 2025-07-14 22:11:17.579 [WARNING][5495] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" HandleID="k8s-pod-network.0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:17.584497 env[1215]: 2025-07-14 22:11:17.579 [INFO][5495] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" HandleID="k8s-pod-network.0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:17.584497 env[1215]: 2025-07-14 22:11:17.581 [INFO][5495] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:17.584497 env[1215]: 2025-07-14 22:11:17.582 [INFO][5486] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:11:17.584987 env[1215]: time="2025-07-14T22:11:17.584531134Z" level=info msg="TearDown network for sandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\" successfully" Jul 14 22:11:17.584987 env[1215]: time="2025-07-14T22:11:17.584597534Z" level=info msg="StopPodSandbox for \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\" returns successfully" Jul 14 22:11:17.585083 env[1215]: time="2025-07-14T22:11:17.585048096Z" level=info msg="RemovePodSandbox for \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\"" Jul 14 22:11:17.585120 env[1215]: time="2025-07-14T22:11:17.585086376Z" level=info msg="Forcibly stopping sandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\"" Jul 14 22:11:17.655010 env[1215]: 2025-07-14 22:11:17.620 [WARNING][5513] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0", GenerateName:"calico-apiserver-7c87d7d578-", Namespace:"calico-apiserver", SelfLink:"", UID:"d8c1108b-9df8-49ba-a271-e4b581ab48a1", ResourceVersion:"1115", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 10, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c87d7d578", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2", Pod:"calico-apiserver-7c87d7d578-msz9q", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie13b9f0c917", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:17.655010 env[1215]: 2025-07-14 22:11:17.620 [INFO][5513] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:11:17.655010 env[1215]: 2025-07-14 22:11:17.620 [INFO][5513] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" iface="eth0" netns="" Jul 14 22:11:17.655010 env[1215]: 2025-07-14 22:11:17.620 [INFO][5513] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:11:17.655010 env[1215]: 2025-07-14 22:11:17.620 [INFO][5513] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:11:17.655010 env[1215]: 2025-07-14 22:11:17.638 [INFO][5522] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" HandleID="k8s-pod-network.0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:17.655010 env[1215]: 2025-07-14 22:11:17.639 [INFO][5522] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:17.655010 env[1215]: 2025-07-14 22:11:17.639 [INFO][5522] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:17.655010 env[1215]: 2025-07-14 22:11:17.649 [WARNING][5522] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" HandleID="k8s-pod-network.0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:17.655010 env[1215]: 2025-07-14 22:11:17.649 [INFO][5522] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" HandleID="k8s-pod-network.0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:17.655010 env[1215]: 2025-07-14 22:11:17.651 [INFO][5522] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:17.655010 env[1215]: 2025-07-14 22:11:17.653 [INFO][5513] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052" Jul 14 22:11:17.656424 env[1215]: time="2025-07-14T22:11:17.654969335Z" level=info msg="TearDown network for sandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\" successfully" Jul 14 22:11:17.659801 env[1215]: time="2025-07-14T22:11:17.659759434Z" level=info msg="RemovePodSandbox \"0eafc5255836ac29726b49892f7c1a94a1ccecafe84ecb8728d461c3f1ec0052\" returns successfully" Jul 14 22:11:20.525298 kernel: kauditd_printk_skb: 106 callbacks suppressed Jul 14 22:11:20.525445 kernel: audit: type=1400 audit(1752531080.523:1506): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:20.523000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:20.523000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40026874a0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:11:20.532616 kernel: audit: type=1300 audit(1752531080.523:1506): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40026874a0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:11:20.532679 kernel: audit: type=1327 audit(1752531080.523:1506): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:11:20.523000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:11:20.523000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:20.538573 kernel: audit: type=1400 audit(1752531080.523:1507): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:20.538613 kernel: audit: type=1300 audit(1752531080.523:1507): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40026874c0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:11:20.523000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40026874c0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:11:20.523000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:11:20.545523 kernel: audit: type=1327 audit(1752531080.523:1507): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:11:20.545575 kernel: audit: type=1400 audit(1752531080.523:1508): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:20.523000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:20.523000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002041680 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:11:20.552189 kernel: audit: type=1300 audit(1752531080.523:1508): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002041680 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:11:20.552248 kernel: audit: type=1327 audit(1752531080.523:1508): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:11:20.523000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:11:20.525000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:20.558745 kernel: audit: type=1400 audit(1752531080.525:1509): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:11:20.525000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002100aa0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:11:20.525000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:11:28.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.118:22-10.0.0.1:38840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:28.813106 systemd[1]: Started sshd@7-10.0.0.118:22-10.0.0.1:38840.service. Jul 14 22:11:28.814354 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 22:11:28.814401 kernel: audit: type=1130 audit(1752531088.811:1510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.118:22-10.0.0.1:38840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:28.853000 audit[5560]: USER_ACCT pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:28.855528 sshd[5560]: Accepted publickey for core from 10.0.0.1 port 38840 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:11:28.857407 sshd[5560]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:11:28.855000 audit[5560]: CRED_ACQ pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:28.861927 kernel: audit: type=1101 audit(1752531088.853:1511): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:28.862018 kernel: audit: type=1103 audit(1752531088.855:1512): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:28.864073 kernel: audit: type=1006 audit(1752531088.855:1513): pid=5560 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 14 22:11:28.855000 audit[5560]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff37a8f0 a2=3 a3=1 items=0 ppid=1 pid=5560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:28.865957 systemd[1]: Started session-8.scope. Jul 14 22:11:28.866160 systemd-logind[1202]: New session 8 of user core. Jul 14 22:11:28.867448 kernel: audit: type=1300 audit(1752531088.855:1513): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff37a8f0 a2=3 a3=1 items=0 ppid=1 pid=5560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:28.867497 kernel: audit: type=1327 audit(1752531088.855:1513): proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:28.855000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:28.868000 audit[5560]: USER_START pid=5560 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:28.872000 audit[5562]: CRED_ACQ pid=5562 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:28.876866 kernel: audit: type=1105 audit(1752531088.868:1514): pid=5560 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:28.876931 kernel: audit: type=1103 audit(1752531088.872:1515): pid=5562 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:29.276457 sshd[5560]: pam_unix(sshd:session): session closed for user core Jul 14 22:11:29.276000 audit[5560]: USER_END pid=5560 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:29.279100 systemd[1]: sshd@7-10.0.0.118:22-10.0.0.1:38840.service: Deactivated successfully. Jul 14 22:11:29.279917 systemd[1]: session-8.scope: Deactivated successfully. Jul 14 22:11:29.280500 systemd-logind[1202]: Session 8 logged out. Waiting for processes to exit. Jul 14 22:11:29.276000 audit[5560]: CRED_DISP pid=5560 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:29.281446 systemd-logind[1202]: Removed session 8. Jul 14 22:11:29.283910 kernel: audit: type=1106 audit(1752531089.276:1516): pid=5560 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:29.283997 kernel: audit: type=1104 audit(1752531089.276:1517): pid=5560 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:29.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.118:22-10.0.0.1:38840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:29.422139 kubelet[1999]: I0714 22:11:29.422088 1999 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:11:29.466000 audit[5577]: NETFILTER_CFG table=filter:132 family=2 entries=10 op=nft_register_rule pid=5577 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:29.466000 audit[5577]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffc035170 a2=0 a3=1 items=0 ppid=2099 pid=5577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:29.466000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:29.472038 env[1215]: time="2025-07-14T22:11:29.471993284Z" level=info msg="StopContainer for \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\" with timeout 30 (s)" Jul 14 22:11:29.472532 env[1215]: time="2025-07-14T22:11:29.472310485Z" level=info msg="Stop container \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\" with signal terminated" Jul 14 22:11:29.474000 audit[5577]: NETFILTER_CFG table=nat:133 family=2 entries=42 op=nft_register_chain pid=5577 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:29.474000 audit[5577]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13892 a0=3 a1=fffffc035170 a2=0 a3=1 items=0 ppid=2099 pid=5577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:29.474000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:29.495617 systemd[1]: cri-containerd-cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb.scope: Deactivated successfully. Jul 14 22:11:29.495937 systemd[1]: cri-containerd-cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb.scope: Consumed 2.686s CPU time. Jul 14 22:11:29.494000 audit: BPF prog-id=194 op=UNLOAD Jul 14 22:11:29.500000 audit: BPF prog-id=197 op=UNLOAD Jul 14 22:11:29.528068 systemd[1]: Created slice kubepods-besteffort-pod6150160b_72f4_43f4_8997_5e70f2ded6ea.slice. Jul 14 22:11:29.545384 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb-rootfs.mount: Deactivated successfully. Jul 14 22:11:29.546658 env[1215]: time="2025-07-14T22:11:29.546608428Z" level=info msg="shim disconnected" id=cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb Jul 14 22:11:29.546658 env[1215]: time="2025-07-14T22:11:29.546656108Z" level=warning msg="cleaning up after shim disconnected" id=cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb namespace=k8s.io Jul 14 22:11:29.546798 env[1215]: time="2025-07-14T22:11:29.546665468Z" level=info msg="cleaning up dead shim" Jul 14 22:11:29.566440 env[1215]: time="2025-07-14T22:11:29.566368927Z" level=warning msg="cleanup warnings time=\"2025-07-14T22:11:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5597 runtime=io.containerd.runc.v2\n" Jul 14 22:11:29.567000 audit[5596]: NETFILTER_CFG table=filter:134 family=2 entries=10 op=nft_register_rule pid=5596 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:29.567000 audit[5596]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd9a8f180 a2=0 a3=1 items=0 ppid=2099 pid=5596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:29.567000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:29.573000 audit[5596]: NETFILTER_CFG table=nat:135 family=2 entries=42 op=nft_unregister_chain pid=5596 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:29.573000 audit[5596]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12132 a0=3 a1=ffffd9a8f180 a2=0 a3=1 items=0 ppid=2099 pid=5596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:29.573000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:29.581341 env[1215]: time="2025-07-14T22:11:29.581273612Z" level=info msg="StopContainer for \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\" returns successfully" Jul 14 22:11:29.581990 env[1215]: time="2025-07-14T22:11:29.581962574Z" level=info msg="StopPodSandbox for \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\"" Jul 14 22:11:29.582198 env[1215]: time="2025-07-14T22:11:29.582176255Z" level=info msg="Container to stop \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 14 22:11:29.584917 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4-shm.mount: Deactivated successfully. Jul 14 22:11:29.597019 systemd[1]: cri-containerd-7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4.scope: Deactivated successfully. Jul 14 22:11:29.595000 audit: BPF prog-id=190 op=UNLOAD Jul 14 22:11:29.600000 audit: BPF prog-id=193 op=UNLOAD Jul 14 22:11:29.635252 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4-rootfs.mount: Deactivated successfully. Jul 14 22:11:29.639570 env[1215]: time="2025-07-14T22:11:29.639518027Z" level=info msg="shim disconnected" id=7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4 Jul 14 22:11:29.639570 env[1215]: time="2025-07-14T22:11:29.639567027Z" level=warning msg="cleaning up after shim disconnected" id=7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4 namespace=k8s.io Jul 14 22:11:29.639726 env[1215]: time="2025-07-14T22:11:29.639575987Z" level=info msg="cleaning up dead shim" Jul 14 22:11:29.642710 kubelet[1999]: I0714 22:11:29.642664 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6150160b-72f4-43f4-8997-5e70f2ded6ea-calico-apiserver-certs\") pod \"calico-apiserver-6cfff6787d-hzskx\" (UID: \"6150160b-72f4-43f4-8997-5e70f2ded6ea\") " pod="calico-apiserver/calico-apiserver-6cfff6787d-hzskx" Jul 14 22:11:29.642849 kubelet[1999]: I0714 22:11:29.642730 1999 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-r82sv\" (UniqueName: \"kubernetes.io/projected/6150160b-72f4-43f4-8997-5e70f2ded6ea-kube-api-access-r82sv\") pod \"calico-apiserver-6cfff6787d-hzskx\" (UID: \"6150160b-72f4-43f4-8997-5e70f2ded6ea\") " pod="calico-apiserver/calico-apiserver-6cfff6787d-hzskx" Jul 14 22:11:29.647318 env[1215]: time="2025-07-14T22:11:29.647277210Z" level=warning msg="cleanup warnings time=\"2025-07-14T22:11:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5627 runtime=io.containerd.runc.v2\n" Jul 14 22:11:29.721939 systemd-networkd[1046]: cali7e64c216a26: Link DOWN Jul 14 22:11:29.721949 systemd-networkd[1046]: cali7e64c216a26: Lost carrier Jul 14 22:11:29.732000 audit[5664]: NETFILTER_CFG table=filter:136 family=2 entries=55 op=nft_register_rule pid=5664 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:29.732000 audit[5664]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8944 a0=3 a1=fffff63c27d0 a2=0 a3=ffffa3b49fa8 items=0 ppid=3397 pid=5664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:29.732000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:29.732000 audit[5664]: NETFILTER_CFG table=filter:137 family=2 entries=2 op=nft_unregister_chain pid=5664 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:29.732000 audit[5664]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff63c27d0 a2=0 a3=ffffa3b49fa8 items=0 ppid=3397 pid=5664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:29.732000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.720 [INFO][5650] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.721 [INFO][5650] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" iface="eth0" netns="/var/run/netns/cni-68d6224f-93ed-4ec7-0e01-5f764dc4259a" Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.721 [INFO][5650] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" iface="eth0" netns="/var/run/netns/cni-68d6224f-93ed-4ec7-0e01-5f764dc4259a" Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.734 [INFO][5650] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" after=13.28028ms iface="eth0" netns="/var/run/netns/cni-68d6224f-93ed-4ec7-0e01-5f764dc4259a" Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.734 [INFO][5650] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.734 [INFO][5650] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.759 [INFO][5666] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" HandleID="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.759 [INFO][5666] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.759 [INFO][5666] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.797 [INFO][5666] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" HandleID="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.797 [INFO][5666] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" HandleID="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.798 [INFO][5666] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:29.802411 env[1215]: 2025-07-14 22:11:29.800 [INFO][5650] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Jul 14 22:11:29.803292 env[1215]: time="2025-07-14T22:11:29.803250758Z" level=info msg="TearDown network for sandbox \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\" successfully" Jul 14 22:11:29.803437 env[1215]: time="2025-07-14T22:11:29.803416439Z" level=info msg="StopPodSandbox for \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\" returns successfully" Jul 14 22:11:29.833876 env[1215]: time="2025-07-14T22:11:29.833830890Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6cfff6787d-hzskx,Uid:6150160b-72f4-43f4-8997-5e70f2ded6ea,Namespace:calico-apiserver,Attempt:0,}" Jul 14 22:11:29.844167 kubelet[1999]: I0714 22:11:29.844112 1999 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6c50cb2a-3c39-4f9d-91d6-7f2c4d312652-calico-apiserver-certs\") pod \"6c50cb2a-3c39-4f9d-91d6-7f2c4d312652\" (UID: \"6c50cb2a-3c39-4f9d-91d6-7f2c4d312652\") " Jul 14 22:11:29.844606 kubelet[1999]: I0714 22:11:29.844581 1999 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-fkl2r\" (UniqueName: \"kubernetes.io/projected/6c50cb2a-3c39-4f9d-91d6-7f2c4d312652-kube-api-access-fkl2r\") pod \"6c50cb2a-3c39-4f9d-91d6-7f2c4d312652\" (UID: \"6c50cb2a-3c39-4f9d-91d6-7f2c4d312652\") " Jul 14 22:11:29.849147 kubelet[1999]: I0714 22:11:29.849101 1999 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/6c50cb2a-3c39-4f9d-91d6-7f2c4d312652-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "6c50cb2a-3c39-4f9d-91d6-7f2c4d312652" (UID: "6c50cb2a-3c39-4f9d-91d6-7f2c4d312652"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 14 22:11:29.849256 kubelet[1999]: I0714 22:11:29.849202 1999 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6c50cb2a-3c39-4f9d-91d6-7f2c4d312652-kube-api-access-fkl2r" (OuterVolumeSpecName: "kube-api-access-fkl2r") pod "6c50cb2a-3c39-4f9d-91d6-7f2c4d312652" (UID: "6c50cb2a-3c39-4f9d-91d6-7f2c4d312652"). InnerVolumeSpecName "kube-api-access-fkl2r". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 14 22:11:29.945742 kubelet[1999]: I0714 22:11:29.945694 1999 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-fkl2r\" (UniqueName: \"kubernetes.io/projected/6c50cb2a-3c39-4f9d-91d6-7f2c4d312652-kube-api-access-fkl2r\") on node \"localhost\" DevicePath \"\"" Jul 14 22:11:29.945742 kubelet[1999]: I0714 22:11:29.945732 1999 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6c50cb2a-3c39-4f9d-91d6-7f2c4d312652-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 14 22:11:29.953940 systemd-networkd[1046]: cali80b36c7ef7b: Link UP Jul 14 22:11:29.956394 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali80b36c7ef7b: link becomes ready Jul 14 22:11:29.956361 systemd-networkd[1046]: cali80b36c7ef7b: Gained carrier Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.877 [INFO][5676] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0 calico-apiserver-6cfff6787d- calico-apiserver 6150160b-72f4-43f4-8997-5e70f2ded6ea 1252 0 2025-07-14 22:11:29 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6cfff6787d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6cfff6787d-hzskx eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali80b36c7ef7b [] [] }} ContainerID="999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-hzskx" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--hzskx-" Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.877 [INFO][5676] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-hzskx" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0" Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.907 [INFO][5693] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" HandleID="k8s-pod-network.999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" Workload="localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0" Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.908 [INFO][5693] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" HandleID="k8s-pod-network.999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" Workload="localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002e4700), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6cfff6787d-hzskx", "timestamp":"2025-07-14 22:11:29.907893072 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.908 [INFO][5693] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.908 [INFO][5693] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.908 [INFO][5693] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.917 [INFO][5693] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" host="localhost" Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.921 [INFO][5693] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.927 [INFO][5693] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.929 [INFO][5693] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.931 [INFO][5693] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.931 [INFO][5693] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" host="localhost" Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.933 [INFO][5693] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688 Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.936 [INFO][5693] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" host="localhost" Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.948 [INFO][5693] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.138/26] block=192.168.88.128/26 handle="k8s-pod-network.999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" host="localhost" Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.949 [INFO][5693] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.138/26] handle="k8s-pod-network.999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" host="localhost" Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.949 [INFO][5693] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:29.986396 env[1215]: 2025-07-14 22:11:29.949 [INFO][5693] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.138/26] IPv6=[] ContainerID="999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" HandleID="k8s-pod-network.999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" Workload="localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0" Jul 14 22:11:29.987150 env[1215]: 2025-07-14 22:11:29.950 [INFO][5676] cni-plugin/k8s.go 418: Populated endpoint ContainerID="999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-hzskx" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0", GenerateName:"calico-apiserver-6cfff6787d-", Namespace:"calico-apiserver", SelfLink:"", UID:"6150160b-72f4-43f4-8997-5e70f2ded6ea", ResourceVersion:"1252", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 11, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6cfff6787d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6cfff6787d-hzskx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.138/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali80b36c7ef7b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:29.987150 env[1215]: 2025-07-14 22:11:29.951 [INFO][5676] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.138/32] ContainerID="999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-hzskx" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0" Jul 14 22:11:29.987150 env[1215]: 2025-07-14 22:11:29.951 [INFO][5676] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali80b36c7ef7b ContainerID="999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-hzskx" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0" Jul 14 22:11:29.987150 env[1215]: 2025-07-14 22:11:29.958 [INFO][5676] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-hzskx" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0" Jul 14 22:11:29.987150 env[1215]: 2025-07-14 22:11:29.970 [INFO][5676] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-hzskx" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0", GenerateName:"calico-apiserver-6cfff6787d-", Namespace:"calico-apiserver", SelfLink:"", UID:"6150160b-72f4-43f4-8997-5e70f2ded6ea", ResourceVersion:"1252", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 11, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6cfff6787d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688", Pod:"calico-apiserver-6cfff6787d-hzskx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.138/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali80b36c7ef7b", MAC:"72:31:8e:78:57:96", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:11:29.987150 env[1215]: 2025-07-14 22:11:29.984 [INFO][5676] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688" Namespace="calico-apiserver" Pod="calico-apiserver-6cfff6787d-hzskx" WorkloadEndpoint="localhost-k8s-calico--apiserver--6cfff6787d--hzskx-eth0" Jul 14 22:11:30.021000 audit[5717]: NETFILTER_CFG table=filter:138 family=2 entries=57 op=nft_register_chain pid=5717 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:30.023698 env[1215]: time="2025-07-14T22:11:30.022678255Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:11:30.023698 env[1215]: time="2025-07-14T22:11:30.022721495Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:11:30.023698 env[1215]: time="2025-07-14T22:11:30.022731655Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:11:30.023698 env[1215]: time="2025-07-14T22:11:30.023637058Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688 pid=5716 runtime=io.containerd.runc.v2 Jul 14 22:11:30.021000 audit[5717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27812 a0=3 a1=ffffd8796030 a2=0 a3=ffffb8d11fa8 items=0 ppid=3397 pid=5717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.021000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:30.035552 systemd[1]: Started cri-containerd-999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688.scope. Jul 14 22:11:30.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.074000 audit: BPF prog-id=236 op=LOAD Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5716 pid=5727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939393031333133303830366436383434313061306634373037336430 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5716 pid=5727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939393031333133303830366436383434313061306634373037336430 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit: BPF prog-id=237 op=LOAD Jul 14 22:11:30.077000 audit[5727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5716 pid=5727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939393031333133303830366436383434313061306634373037336430 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit: BPF prog-id=238 op=LOAD Jul 14 22:11:30.077000 audit[5727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5716 pid=5727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939393031333133303830366436383434313061306634373037336430 Jul 14 22:11:30.077000 audit: BPF prog-id=238 op=UNLOAD Jul 14 22:11:30.077000 audit: BPF prog-id=237 op=UNLOAD Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { perfmon } for pid=5727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit[5727]: AVC avc: denied { bpf } for pid=5727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.077000 audit: BPF prog-id=239 op=LOAD Jul 14 22:11:30.077000 audit[5727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5716 pid=5727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939393031333133303830366436383434313061306634373037336430 Jul 14 22:11:30.079761 systemd-resolved[1153]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:11:30.111957 env[1215]: time="2025-07-14T22:11:30.111908917Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6cfff6787d-hzskx,Uid:6150160b-72f4-43f4-8997-5e70f2ded6ea,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688\"" Jul 14 22:11:30.114728 env[1215]: time="2025-07-14T22:11:30.114674165Z" level=info msg="CreateContainer within sandbox \"999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 22:11:30.197491 env[1215]: time="2025-07-14T22:11:30.197430408Z" level=info msg="CreateContainer within sandbox \"999013130806d684410a0f47073d0b94e51a9635c99d9babaf9d3b434604d688\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"762cb8f81ebf7b340fbe4bb3504a5330f47664e455e113d2672107046c557953\"" Jul 14 22:11:30.197994 env[1215]: time="2025-07-14T22:11:30.197966769Z" level=info msg="StartContainer for \"762cb8f81ebf7b340fbe4bb3504a5330f47664e455e113d2672107046c557953\"" Jul 14 22:11:30.215255 systemd[1]: Started cri-containerd-762cb8f81ebf7b340fbe4bb3504a5330f47664e455e113d2672107046c557953.scope. Jul 14 22:11:30.228222 kubelet[1999]: E0714 22:11:30.227704 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:11:30.239978 systemd[1]: Removed slice kubepods-besteffort-pod6c50cb2a_3c39_4f9d_91d6_7f2c4d312652.slice. Jul 14 22:11:30.240056 systemd[1]: kubepods-besteffort-pod6c50cb2a_3c39_4f9d_91d6_7f2c4d312652.slice: Consumed 2.727s CPU time. Jul 14 22:11:30.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.242000 audit: BPF prog-id=240 op=LOAD Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5716 pid=5760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736326362386638316562663762333430666265346262333530346135 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5716 pid=5760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736326362386638316562663762333430666265346262333530346135 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit: BPF prog-id=241 op=LOAD Jul 14 22:11:30.243000 audit[5760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5716 pid=5760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736326362386638316562663762333430666265346262333530346135 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit: BPF prog-id=242 op=LOAD Jul 14 22:11:30.243000 audit[5760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5716 pid=5760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736326362386638316562663762333430666265346262333530346135 Jul 14 22:11:30.243000 audit: BPF prog-id=242 op=UNLOAD Jul 14 22:11:30.243000 audit: BPF prog-id=241 op=UNLOAD Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:11:30.243000 audit: BPF prog-id=243 op=LOAD Jul 14 22:11:30.243000 audit[5760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5716 pid=5760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736326362386638316562663762333430666265346262333530346135 Jul 14 22:11:30.271250 env[1215]: time="2025-07-14T22:11:30.271200224Z" level=info msg="StartContainer for \"762cb8f81ebf7b340fbe4bb3504a5330f47664e455e113d2672107046c557953\" returns successfully" Jul 14 22:11:30.479356 kubelet[1999]: I0714 22:11:30.479209 1999 scope.go:117] "RemoveContainer" containerID="cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb" Jul 14 22:11:30.482293 env[1215]: time="2025-07-14T22:11:30.482246723Z" level=info msg="RemoveContainer for \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\"" Jul 14 22:11:30.486420 env[1215]: time="2025-07-14T22:11:30.486356015Z" level=info msg="RemoveContainer for \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\" returns successfully" Jul 14 22:11:30.486765 kubelet[1999]: I0714 22:11:30.486736 1999 scope.go:117] "RemoveContainer" containerID="cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb" Jul 14 22:11:30.487132 env[1215]: time="2025-07-14T22:11:30.486993457Z" level=error msg="ContainerStatus for \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\": not found" Jul 14 22:11:30.487325 kubelet[1999]: E0714 22:11:30.487268 1999 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\": not found" containerID="cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb" Jul 14 22:11:30.487325 kubelet[1999]: I0714 22:11:30.487300 1999 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb"} err="failed to get container status \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\": rpc error: code = NotFound desc = an error occurred when try to find container \"cde036902c624129a57d3d0b1946e05428c642091100d42aa8067009580a18bb\": not found" Jul 14 22:11:30.501548 kubelet[1999]: I0714 22:11:30.501477 1999 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6cfff6787d-hzskx" podStartSLOduration=1.501461419 podStartE2EDuration="1.501461419s" podCreationTimestamp="2025-07-14 22:11:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:11:30.492532553 +0000 UTC m=+74.366915323" watchObservedRunningTime="2025-07-14 22:11:30.501461419 +0000 UTC m=+74.375844149" Jul 14 22:11:30.512000 audit[5795]: NETFILTER_CFG table=filter:139 family=2 entries=10 op=nft_register_rule pid=5795 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:30.512000 audit[5795]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff32d2970 a2=0 a3=1 items=0 ppid=2099 pid=5795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.512000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:30.521000 audit[5795]: NETFILTER_CFG table=nat:140 family=2 entries=38 op=nft_register_rule pid=5795 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:30.521000 audit[5795]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffff32d2970 a2=0 a3=1 items=0 ppid=2099 pid=5795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:30.521000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:30.547669 systemd[1]: run-netns-cni\x2d68d6224f\x2d93ed\x2d4ec7\x2d0e01\x2d5f764dc4259a.mount: Deactivated successfully. Jul 14 22:11:30.547765 systemd[1]: var-lib-kubelet-pods-6c50cb2a\x2d3c39\x2d4f9d\x2d91d6\x2d7f2c4d312652-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dfkl2r.mount: Deactivated successfully. Jul 14 22:11:30.547819 systemd[1]: var-lib-kubelet-pods-6c50cb2a\x2d3c39\x2d4f9d\x2d91d6\x2d7f2c4d312652-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 14 22:11:31.710000 audit[5771]: AVC avc: denied { watch } for pid=5771 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_11_29.3902162052/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c493 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c352,c493 tclass=file permissive=0 Jul 14 22:11:31.710000 audit[5771]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000ceab20 a2=fc6 a3=0 items=0 ppid=5716 pid=5771 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c493 key=(null) Jul 14 22:11:31.710000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:11:31.760000 audit[5797]: NETFILTER_CFG table=filter:141 family=2 entries=10 op=nft_register_rule pid=5797 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:31.760000 audit[5797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffb717dc0 a2=0 a3=1 items=0 ppid=2099 pid=5797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:31.760000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:31.769121 env[1215]: time="2025-07-14T22:11:31.769069768Z" level=info msg="StopContainer for \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\" with timeout 30 (s)" Jul 14 22:11:31.769546 env[1215]: time="2025-07-14T22:11:31.769428049Z" level=info msg="Stop container \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\" with signal terminated" Jul 14 22:11:31.770000 audit[5797]: NETFILTER_CFG table=nat:142 family=2 entries=42 op=nft_register_chain pid=5797 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:31.770000 audit[5797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13892 a0=3 a1=fffffb717dc0 a2=0 a3=1 items=0 ppid=2099 pid=5797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:31.770000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:31.786944 systemd[1]: cri-containerd-bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db.scope: Deactivated successfully. Jul 14 22:11:31.785000 audit: BPF prog-id=218 op=UNLOAD Jul 14 22:11:31.787269 systemd[1]: cri-containerd-bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db.scope: Consumed 1.573s CPU time. Jul 14 22:11:31.790000 audit: BPF prog-id=221 op=UNLOAD Jul 14 22:11:31.809588 env[1215]: time="2025-07-14T22:11:31.809529324Z" level=info msg="shim disconnected" id=bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db Jul 14 22:11:31.809588 env[1215]: time="2025-07-14T22:11:31.809580044Z" level=warning msg="cleaning up after shim disconnected" id=bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db namespace=k8s.io Jul 14 22:11:31.809588 env[1215]: time="2025-07-14T22:11:31.809590204Z" level=info msg="cleaning up dead shim" Jul 14 22:11:31.809835 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db-rootfs.mount: Deactivated successfully. Jul 14 22:11:31.817462 env[1215]: time="2025-07-14T22:11:31.817403187Z" level=warning msg="cleanup warnings time=\"2025-07-14T22:11:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5815 runtime=io.containerd.runc.v2\n" Jul 14 22:11:31.832040 env[1215]: time="2025-07-14T22:11:31.831987589Z" level=info msg="StopContainer for \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\" returns successfully" Jul 14 22:11:31.832892 env[1215]: time="2025-07-14T22:11:31.832859591Z" level=info msg="StopPodSandbox for \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\"" Jul 14 22:11:31.833000 env[1215]: time="2025-07-14T22:11:31.832924711Z" level=info msg="Container to stop \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 14 22:11:31.835568 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2-shm.mount: Deactivated successfully. Jul 14 22:11:31.848755 systemd[1]: cri-containerd-51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2.scope: Deactivated successfully. Jul 14 22:11:31.847000 audit: BPF prog-id=214 op=UNLOAD Jul 14 22:11:31.852000 audit: BPF prog-id=217 op=UNLOAD Jul 14 22:11:31.866945 env[1215]: time="2025-07-14T22:11:31.866892049Z" level=info msg="shim disconnected" id=51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2 Jul 14 22:11:31.866945 env[1215]: time="2025-07-14T22:11:31.866946529Z" level=warning msg="cleaning up after shim disconnected" id=51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2 namespace=k8s.io Jul 14 22:11:31.867097 env[1215]: time="2025-07-14T22:11:31.866956889Z" level=info msg="cleaning up dead shim" Jul 14 22:11:31.868435 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2-rootfs.mount: Deactivated successfully. Jul 14 22:11:31.877994 env[1215]: time="2025-07-14T22:11:31.877937600Z" level=warning msg="cleanup warnings time=\"2025-07-14T22:11:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5847 runtime=io.containerd.runc.v2\n" Jul 14 22:11:31.957602 systemd-networkd[1046]: calie13b9f0c917: Link DOWN Jul 14 22:11:31.957608 systemd-networkd[1046]: calie13b9f0c917: Lost carrier Jul 14 22:11:32.000000 audit[5890]: NETFILTER_CFG table=filter:143 family=2 entries=55 op=nft_register_rule pid=5890 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:32.000000 audit[5890]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8944 a0=3 a1=ffffe1992940 a2=0 a3=ffffbc276fa8 items=0 ppid=3397 pid=5890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:32.000000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:32.000000 audit[5890]: NETFILTER_CFG table=filter:144 family=2 entries=2 op=nft_unregister_chain pid=5890 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:11:32.000000 audit[5890]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffe1992940 a2=0 a3=ffffbc276fa8 items=0 ppid=3397 pid=5890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:32.000000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:11:32.024559 systemd-networkd[1046]: cali80b36c7ef7b: Gained IPv6LL Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:31.954 [INFO][5870] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:31.956 [INFO][5870] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" iface="eth0" netns="/var/run/netns/cni-9cc244e7-1831-8867-af57-02875ad1c385" Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:31.957 [INFO][5870] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" iface="eth0" netns="/var/run/netns/cni-9cc244e7-1831-8867-af57-02875ad1c385" Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:31.970 [INFO][5870] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" after=13.659639ms iface="eth0" netns="/var/run/netns/cni-9cc244e7-1831-8867-af57-02875ad1c385" Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:31.970 [INFO][5870] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:31.970 [INFO][5870] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:31.993 [INFO][5879] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" HandleID="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:31.993 [INFO][5879] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:31.993 [INFO][5879] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:32.037 [INFO][5879] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" HandleID="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:32.038 [INFO][5879] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" HandleID="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:32.039 [INFO][5879] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:11:32.043470 env[1215]: 2025-07-14 22:11:32.041 [INFO][5870] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Jul 14 22:11:32.046099 systemd[1]: run-netns-cni\x2d9cc244e7\x2d1831\x2d8867\x2daf57\x2d02875ad1c385.mount: Deactivated successfully. Jul 14 22:11:32.046981 env[1215]: time="2025-07-14T22:11:32.046941162Z" level=info msg="TearDown network for sandbox \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\" successfully" Jul 14 22:11:32.047065 env[1215]: time="2025-07-14T22:11:32.046981682Z" level=info msg="StopPodSandbox for \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\" returns successfully" Jul 14 22:11:32.158714 kubelet[1999]: I0714 22:11:32.158666 1999 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d8c1108b-9df8-49ba-a271-e4b581ab48a1-calico-apiserver-certs\") pod \"d8c1108b-9df8-49ba-a271-e4b581ab48a1\" (UID: \"d8c1108b-9df8-49ba-a271-e4b581ab48a1\") " Jul 14 22:11:32.158714 kubelet[1999]: I0714 22:11:32.158714 1999 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-lgxt5\" (UniqueName: \"kubernetes.io/projected/d8c1108b-9df8-49ba-a271-e4b581ab48a1-kube-api-access-lgxt5\") pod \"d8c1108b-9df8-49ba-a271-e4b581ab48a1\" (UID: \"d8c1108b-9df8-49ba-a271-e4b581ab48a1\") " Jul 14 22:11:32.164201 kubelet[1999]: I0714 22:11:32.164152 1999 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d8c1108b-9df8-49ba-a271-e4b581ab48a1-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "d8c1108b-9df8-49ba-a271-e4b581ab48a1" (UID: "d8c1108b-9df8-49ba-a271-e4b581ab48a1"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 14 22:11:32.164879 kubelet[1999]: I0714 22:11:32.164851 1999 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d8c1108b-9df8-49ba-a271-e4b581ab48a1-kube-api-access-lgxt5" (OuterVolumeSpecName: "kube-api-access-lgxt5") pod "d8c1108b-9df8-49ba-a271-e4b581ab48a1" (UID: "d8c1108b-9df8-49ba-a271-e4b581ab48a1"). InnerVolumeSpecName "kube-api-access-lgxt5". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 14 22:11:32.166213 systemd[1]: var-lib-kubelet-pods-d8c1108b\x2d9df8\x2d49ba\x2da271\x2de4b581ab48a1-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 14 22:11:32.228263 kubelet[1999]: I0714 22:11:32.228212 1999 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="6c50cb2a-3c39-4f9d-91d6-7f2c4d312652" path="/var/lib/kubelet/pods/6c50cb2a-3c39-4f9d-91d6-7f2c4d312652/volumes" Jul 14 22:11:32.231939 systemd[1]: Removed slice kubepods-besteffort-podd8c1108b_9df8_49ba_a271_e4b581ab48a1.slice. Jul 14 22:11:32.232020 systemd[1]: kubepods-besteffort-podd8c1108b_9df8_49ba_a271_e4b581ab48a1.slice: Consumed 1.600s CPU time. Jul 14 22:11:32.259486 kubelet[1999]: I0714 22:11:32.259369 1999 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d8c1108b-9df8-49ba-a271-e4b581ab48a1-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 14 22:11:32.259486 kubelet[1999]: I0714 22:11:32.259413 1999 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-lgxt5\" (UniqueName: \"kubernetes.io/projected/d8c1108b-9df8-49ba-a271-e4b581ab48a1-kube-api-access-lgxt5\") on node \"localhost\" DevicePath \"\"" Jul 14 22:11:32.486185 kubelet[1999]: I0714 22:11:32.486154 1999 scope.go:117] "RemoveContainer" containerID="bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db" Jul 14 22:11:32.487717 env[1215]: time="2025-07-14T22:11:32.487577639Z" level=info msg="RemoveContainer for \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\"" Jul 14 22:11:32.491143 env[1215]: time="2025-07-14T22:11:32.491091329Z" level=info msg="RemoveContainer for \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\" returns successfully" Jul 14 22:11:32.491297 kubelet[1999]: I0714 22:11:32.491274 1999 scope.go:117] "RemoveContainer" containerID="bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db" Jul 14 22:11:32.491621 env[1215]: time="2025-07-14T22:11:32.491556210Z" level=error msg="ContainerStatus for \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\": not found" Jul 14 22:11:32.491759 kubelet[1999]: E0714 22:11:32.491730 1999 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\": not found" containerID="bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db" Jul 14 22:11:32.491897 kubelet[1999]: I0714 22:11:32.491762 1999 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db"} err="failed to get container status \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\": rpc error: code = NotFound desc = an error occurred when try to find container \"bcceb2cb280a880eba9bdd731842bd34e6b56b5025252226f2e8098b3a1983db\": not found" Jul 14 22:11:32.785000 audit[5895]: NETFILTER_CFG table=filter:145 family=2 entries=10 op=nft_register_rule pid=5895 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:32.785000 audit[5895]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd58f5390 a2=0 a3=1 items=0 ppid=2099 pid=5895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:32.785000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:32.795000 audit[5895]: NETFILTER_CFG table=nat:146 family=2 entries=42 op=nft_unregister_chain pid=5895 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:32.795000 audit[5895]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12132 a0=3 a1=ffffd58f5390 a2=0 a3=1 items=0 ppid=2099 pid=5895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:32.795000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:32.809874 systemd[1]: var-lib-kubelet-pods-d8c1108b\x2d9df8\x2d49ba\x2da271\x2de4b581ab48a1-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dlgxt5.mount: Deactivated successfully. Jul 14 22:11:34.229148 kubelet[1999]: I0714 22:11:34.229097 1999 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="d8c1108b-9df8-49ba-a271-e4b581ab48a1" path="/var/lib/kubelet/pods/d8c1108b-9df8-49ba-a271-e4b581ab48a1/volumes" Jul 14 22:11:34.281318 systemd[1]: Started sshd@8-10.0.0.118:22-10.0.0.1:52790.service. Jul 14 22:11:34.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.118:22-10.0.0.1:52790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:34.283000 kernel: kauditd_printk_skb: 171 callbacks suppressed Jul 14 22:11:34.283077 kernel: audit: type=1130 audit(1752531094.280:1579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.118:22-10.0.0.1:52790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:34.332000 audit[5897]: USER_ACCT pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:34.335487 sshd[5897]: Accepted publickey for core from 10.0.0.1 port 52790 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:11:34.336411 sshd[5897]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:11:34.334000 audit[5897]: CRED_ACQ pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:34.340546 kernel: audit: type=1101 audit(1752531094.332:1580): pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:34.340619 kernel: audit: type=1103 audit(1752531094.334:1581): pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:34.342635 kernel: audit: type=1006 audit(1752531094.334:1582): pid=5897 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 14 22:11:34.334000 audit[5897]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd421abf0 a2=3 a3=1 items=0 ppid=1 pid=5897 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:34.345299 systemd[1]: Started session-9.scope. Jul 14 22:11:34.345463 systemd-logind[1202]: New session 9 of user core. Jul 14 22:11:34.346166 kernel: audit: type=1300 audit(1752531094.334:1582): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd421abf0 a2=3 a3=1 items=0 ppid=1 pid=5897 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:34.334000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:34.349021 kernel: audit: type=1327 audit(1752531094.334:1582): proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:34.349000 audit[5897]: USER_START pid=5897 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:34.353000 audit[5899]: CRED_ACQ pid=5899 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:34.359367 kernel: audit: type=1105 audit(1752531094.349:1583): pid=5897 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:34.359455 kernel: audit: type=1103 audit(1752531094.353:1584): pid=5899 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:34.512638 sshd[5897]: pam_unix(sshd:session): session closed for user core Jul 14 22:11:34.512000 audit[5897]: USER_END pid=5897 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:34.516101 systemd[1]: sshd@8-10.0.0.118:22-10.0.0.1:52790.service: Deactivated successfully. Jul 14 22:11:34.516942 systemd[1]: session-9.scope: Deactivated successfully. Jul 14 22:11:34.512000 audit[5897]: CRED_DISP pid=5897 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:34.520664 kernel: audit: type=1106 audit(1752531094.512:1585): pid=5897 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:34.520721 kernel: audit: type=1104 audit(1752531094.512:1586): pid=5897 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:34.520655 systemd-logind[1202]: Session 9 logged out. Waiting for processes to exit. Jul 14 22:11:34.514000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.118:22-10.0.0.1:52790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:34.521421 systemd-logind[1202]: Removed session 9. Jul 14 22:11:37.227085 kubelet[1999]: E0714 22:11:37.227043 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:11:39.517007 systemd[1]: Started sshd@9-10.0.0.118:22-10.0.0.1:52806.service. Jul 14 22:11:39.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.118:22-10.0.0.1:52806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:39.517859 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:11:39.517915 kernel: audit: type=1130 audit(1752531099.515:1588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.118:22-10.0.0.1:52806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:39.548000 audit[5942]: USER_ACCT pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:39.550409 sshd[5942]: Accepted publickey for core from 10.0.0.1 port 52806 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:11:39.552043 sshd[5942]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:11:39.550000 audit[5942]: CRED_ACQ pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:39.556293 kernel: audit: type=1101 audit(1752531099.548:1589): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:39.556398 kernel: audit: type=1103 audit(1752531099.550:1590): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:39.558385 kernel: audit: type=1006 audit(1752531099.550:1591): pid=5942 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 14 22:11:39.550000 audit[5942]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbdc2df0 a2=3 a3=1 items=0 ppid=1 pid=5942 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:39.561565 systemd[1]: Started session-10.scope. Jul 14 22:11:39.561826 kernel: audit: type=1300 audit(1752531099.550:1591): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbdc2df0 a2=3 a3=1 items=0 ppid=1 pid=5942 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:39.550000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:39.562488 systemd-logind[1202]: New session 10 of user core. Jul 14 22:11:39.562963 kernel: audit: type=1327 audit(1752531099.550:1591): proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:39.565000 audit[5942]: USER_START pid=5942 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:39.569000 audit[5944]: CRED_ACQ pid=5944 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:39.573925 kernel: audit: type=1105 audit(1752531099.565:1592): pid=5942 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:39.573979 kernel: audit: type=1103 audit(1752531099.569:1593): pid=5944 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:39.701533 sshd[5942]: pam_unix(sshd:session): session closed for user core Jul 14 22:11:39.701000 audit[5942]: USER_END pid=5942 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:39.701000 audit[5942]: CRED_DISP pid=5942 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:39.706070 systemd[1]: sshd@9-10.0.0.118:22-10.0.0.1:52806.service: Deactivated successfully. Jul 14 22:11:39.707135 systemd[1]: session-10.scope: Deactivated successfully. Jul 14 22:11:39.708054 systemd-logind[1202]: Session 10 logged out. Waiting for processes to exit. Jul 14 22:11:39.708838 systemd-logind[1202]: Removed session 10. Jul 14 22:11:39.709437 kernel: audit: type=1106 audit(1752531099.701:1594): pid=5942 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:39.709489 kernel: audit: type=1104 audit(1752531099.701:1595): pid=5942 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:39.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.118:22-10.0.0.1:52806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:40.437005 systemd[1]: run-containerd-runc-k8s.io-10368e580f1366013b1269016ae8f59f9d8e137a364b5a1f871dc54f443ae45d-runc.ryoDDz.mount: Deactivated successfully. Jul 14 22:11:40.539000 audit[5978]: NETFILTER_CFG table=filter:147 family=2 entries=9 op=nft_register_rule pid=5978 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:40.539000 audit[5978]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc6ff02d0 a2=0 a3=1 items=0 ppid=2099 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:40.539000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:40.548000 audit[5978]: NETFILTER_CFG table=nat:148 family=2 entries=31 op=nft_register_chain pid=5978 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:11:40.548000 audit[5978]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffc6ff02d0 a2=0 a3=1 items=0 ppid=2099 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:40.548000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:11:42.226263 kubelet[1999]: E0714 22:11:42.226169 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:11:44.228494 kubelet[1999]: E0714 22:11:44.228461 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:11:44.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.118:22-10.0.0.1:47374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:44.705751 systemd[1]: Started sshd@10-10.0.0.118:22-10.0.0.1:47374.service. Jul 14 22:11:44.706641 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 14 22:11:44.706674 kernel: audit: type=1130 audit(1752531104.704:1599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.118:22-10.0.0.1:47374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:44.739000 audit[5982]: USER_ACCT pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:44.741160 sshd[5982]: Accepted publickey for core from 10.0.0.1 port 47374 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:11:44.742455 sshd[5982]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:11:44.740000 audit[5982]: CRED_ACQ pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:44.747267 kernel: audit: type=1101 audit(1752531104.739:1600): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:44.747356 kernel: audit: type=1103 audit(1752531104.740:1601): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:44.747404 kernel: audit: type=1006 audit(1752531104.740:1602): pid=5982 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 14 22:11:44.749316 kernel: audit: type=1300 audit(1752531104.740:1602): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff97a4ce0 a2=3 a3=1 items=0 ppid=1 pid=5982 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:44.740000 audit[5982]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff97a4ce0 a2=3 a3=1 items=0 ppid=1 pid=5982 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:44.750495 systemd[1]: Started session-11.scope. Jul 14 22:11:44.751416 systemd-logind[1202]: New session 11 of user core. Jul 14 22:11:44.740000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:44.753555 kernel: audit: type=1327 audit(1752531104.740:1602): proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:44.754000 audit[5982]: USER_START pid=5982 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:44.756000 audit[5984]: CRED_ACQ pid=5984 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:44.763004 kernel: audit: type=1105 audit(1752531104.754:1603): pid=5982 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:44.763062 kernel: audit: type=1103 audit(1752531104.756:1604): pid=5984 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:44.866739 sshd[5982]: pam_unix(sshd:session): session closed for user core Jul 14 22:11:44.866000 audit[5982]: USER_END pid=5982 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:44.869504 systemd[1]: sshd@10-10.0.0.118:22-10.0.0.1:47374.service: Deactivated successfully. Jul 14 22:11:44.870299 systemd[1]: session-11.scope: Deactivated successfully. Jul 14 22:11:44.871040 systemd-logind[1202]: Session 11 logged out. Waiting for processes to exit. Jul 14 22:11:44.866000 audit[5982]: CRED_DISP pid=5982 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:44.871762 systemd-logind[1202]: Removed session 11. Jul 14 22:11:44.873883 kernel: audit: type=1106 audit(1752531104.866:1605): pid=5982 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:44.874123 kernel: audit: type=1104 audit(1752531104.866:1606): pid=5982 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:44.866000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.118:22-10.0.0.1:47374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:46.094312 systemd[1]: run-containerd-runc-k8s.io-10368e580f1366013b1269016ae8f59f9d8e137a364b5a1f871dc54f443ae45d-runc.T9aR08.mount: Deactivated successfully. Jul 14 22:11:49.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.118:22-10.0.0.1:47386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:49.871818 systemd[1]: Started sshd@11-10.0.0.118:22-10.0.0.1:47386.service. Jul 14 22:11:49.872634 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:11:49.872662 kernel: audit: type=1130 audit(1752531109.870:1608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.118:22-10.0.0.1:47386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:49.901000 audit[6018]: USER_ACCT pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:49.903022 sshd[6018]: Accepted publickey for core from 10.0.0.1 port 47386 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:11:49.905000 audit[6018]: CRED_ACQ pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:49.907357 sshd[6018]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:11:49.910884 kernel: audit: type=1101 audit(1752531109.901:1609): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:49.910942 kernel: audit: type=1103 audit(1752531109.905:1610): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:49.910972 kernel: audit: type=1006 audit(1752531109.905:1611): pid=6018 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jul 14 22:11:49.912310 kernel: audit: type=1300 audit(1752531109.905:1611): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4cded20 a2=3 a3=1 items=0 ppid=1 pid=6018 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:49.905000 audit[6018]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4cded20 a2=3 a3=1 items=0 ppid=1 pid=6018 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:49.911986 systemd-logind[1202]: New session 12 of user core. Jul 14 22:11:49.912035 systemd[1]: Started session-12.scope. Jul 14 22:11:49.905000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:49.916399 kernel: audit: type=1327 audit(1752531109.905:1611): proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:49.918000 audit[6018]: USER_START pid=6018 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:49.920000 audit[6020]: CRED_ACQ pid=6020 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:49.926645 kernel: audit: type=1105 audit(1752531109.918:1612): pid=6018 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:49.926685 kernel: audit: type=1103 audit(1752531109.920:1613): pid=6020 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.041506 sshd[6018]: pam_unix(sshd:session): session closed for user core Jul 14 22:11:50.044000 audit[6018]: USER_END pid=6018 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.046785 systemd[1]: Started sshd@12-10.0.0.118:22-10.0.0.1:47388.service. Jul 14 22:11:50.048573 systemd[1]: sshd@11-10.0.0.118:22-10.0.0.1:47386.service: Deactivated successfully. Jul 14 22:11:50.049743 systemd[1]: session-12.scope: Deactivated successfully. Jul 14 22:11:50.044000 audit[6018]: CRED_DISP pid=6018 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.053269 kernel: audit: type=1106 audit(1752531110.044:1614): pid=6018 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.053389 kernel: audit: type=1104 audit(1752531110.044:1615): pid=6018 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.053334 systemd-logind[1202]: Session 12 logged out. Waiting for processes to exit. Jul 14 22:11:50.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.118:22-10.0.0.1:47388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:50.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.118:22-10.0.0.1:47386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:50.054316 systemd-logind[1202]: Removed session 12. Jul 14 22:11:50.082000 audit[6031]: USER_ACCT pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.083831 sshd[6031]: Accepted publickey for core from 10.0.0.1 port 47388 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:11:50.083000 audit[6031]: CRED_ACQ pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.083000 audit[6031]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2094a80 a2=3 a3=1 items=0 ppid=1 pid=6031 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:50.083000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:50.085624 sshd[6031]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:11:50.090212 systemd[1]: Started session-13.scope. Jul 14 22:11:50.090817 systemd-logind[1202]: New session 13 of user core. Jul 14 22:11:50.093000 audit[6031]: USER_START pid=6031 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.095000 audit[6034]: CRED_ACQ pid=6034 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.118:22-10.0.0.1:47392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:50.261073 systemd[1]: Started sshd@13-10.0.0.118:22-10.0.0.1:47392.service. Jul 14 22:11:50.261751 sshd[6031]: pam_unix(sshd:session): session closed for user core Jul 14 22:11:50.266000 audit[6031]: USER_END pid=6031 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.267000 audit[6031]: CRED_DISP pid=6031 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.118:22-10.0.0.1:47388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:50.270175 systemd[1]: sshd@12-10.0.0.118:22-10.0.0.1:47388.service: Deactivated successfully. Jul 14 22:11:50.271098 systemd[1]: session-13.scope: Deactivated successfully. Jul 14 22:11:50.272046 systemd-logind[1202]: Session 13 logged out. Waiting for processes to exit. Jul 14 22:11:50.272830 systemd-logind[1202]: Removed session 13. Jul 14 22:11:50.300000 audit[6043]: USER_ACCT pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.301846 sshd[6043]: Accepted publickey for core from 10.0.0.1 port 47392 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:11:50.301000 audit[6043]: CRED_ACQ pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.301000 audit[6043]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcfc72c80 a2=3 a3=1 items=0 ppid=1 pid=6043 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:50.301000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:50.303116 sshd[6043]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:11:50.306839 systemd-logind[1202]: New session 14 of user core. Jul 14 22:11:50.307738 systemd[1]: Started session-14.scope. Jul 14 22:11:50.310000 audit[6043]: USER_START pid=6043 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.311000 audit[6046]: CRED_ACQ pid=6046 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.446214 sshd[6043]: pam_unix(sshd:session): session closed for user core Jul 14 22:11:50.445000 audit[6043]: USER_END pid=6043 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.445000 audit[6043]: CRED_DISP pid=6043 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:50.449038 systemd[1]: sshd@13-10.0.0.118:22-10.0.0.1:47392.service: Deactivated successfully. Jul 14 22:11:50.449439 systemd-logind[1202]: Session 14 logged out. Waiting for processes to exit. Jul 14 22:11:50.449829 systemd[1]: session-14.scope: Deactivated successfully. Jul 14 22:11:50.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.118:22-10.0.0.1:47392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:50.450832 systemd-logind[1202]: Removed session 14. Jul 14 22:11:55.451046 systemd[1]: Started sshd@14-10.0.0.118:22-10.0.0.1:56168.service. Jul 14 22:11:55.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.118:22-10.0.0.1:56168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.452623 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 14 22:11:55.452682 kernel: audit: type=1130 audit(1752531115.449:1635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.118:22-10.0.0.1:56168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.489000 audit[6088]: USER_ACCT pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:55.491326 sshd[6088]: Accepted publickey for core from 10.0.0.1 port 56168 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:11:55.491000 audit[6088]: CRED_ACQ pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:55.497047 sshd[6088]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:11:55.497704 kernel: audit: type=1101 audit(1752531115.489:1636): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:55.497766 kernel: audit: type=1103 audit(1752531115.491:1637): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:55.497789 kernel: audit: type=1006 audit(1752531115.491:1638): pid=6088 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 14 22:11:55.499684 kernel: audit: type=1300 audit(1752531115.491:1638): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff22df8b0 a2=3 a3=1 items=0 ppid=1 pid=6088 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:55.491000 audit[6088]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff22df8b0 a2=3 a3=1 items=0 ppid=1 pid=6088 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:11:55.501753 systemd[1]: Started session-15.scope. Jul 14 22:11:55.502088 systemd-logind[1202]: New session 15 of user core. Jul 14 22:11:55.491000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:55.504570 kernel: audit: type=1327 audit(1752531115.491:1638): proctitle=737368643A20636F7265205B707269765D Jul 14 22:11:55.505000 audit[6088]: USER_START pid=6088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:55.506000 audit[6090]: CRED_ACQ pid=6090 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:55.513825 kernel: audit: type=1105 audit(1752531115.505:1639): pid=6088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:55.513910 kernel: audit: type=1103 audit(1752531115.506:1640): pid=6090 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:55.683079 sshd[6088]: pam_unix(sshd:session): session closed for user core Jul 14 22:11:55.683000 audit[6088]: USER_END pid=6088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:55.686519 systemd[1]: sshd@14-10.0.0.118:22-10.0.0.1:56168.service: Deactivated successfully. Jul 14 22:11:55.687266 systemd[1]: session-15.scope: Deactivated successfully. Jul 14 22:11:55.687609 systemd-logind[1202]: Session 15 logged out. Waiting for processes to exit. Jul 14 22:11:55.683000 audit[6088]: CRED_DISP pid=6088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:55.688785 systemd-logind[1202]: Removed session 15. Jul 14 22:11:55.691565 kernel: audit: type=1106 audit(1752531115.683:1641): pid=6088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:55.691654 kernel: audit: type=1104 audit(1752531115.683:1642): pid=6088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:11:55.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.118:22-10.0.0.1:56168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:00.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.118:22-10.0.0.1:56172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:00.687920 systemd[1]: Started sshd@15-10.0.0.118:22-10.0.0.1:56172.service. Jul 14 22:12:00.688870 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:12:00.688920 kernel: audit: type=1130 audit(1752531120.686:1644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.118:22-10.0.0.1:56172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:00.717000 audit[6103]: USER_ACCT pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:00.719554 sshd[6103]: Accepted publickey for core from 10.0.0.1 port 56172 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:00.720336 sshd[6103]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:00.718000 audit[6103]: CRED_ACQ pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:00.724806 kernel: audit: type=1101 audit(1752531120.717:1645): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:00.726175 kernel: audit: type=1103 audit(1752531120.718:1646): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:00.726227 kernel: audit: type=1006 audit(1752531120.718:1647): pid=6103 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 14 22:12:00.725801 systemd[1]: Started session-16.scope. Jul 14 22:12:00.726409 systemd-logind[1202]: New session 16 of user core. Jul 14 22:12:00.718000 audit[6103]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe42d41d0 a2=3 a3=1 items=0 ppid=1 pid=6103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:00.729945 kernel: audit: type=1300 audit(1752531120.718:1647): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe42d41d0 a2=3 a3=1 items=0 ppid=1 pid=6103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:00.718000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:00.731232 kernel: audit: type=1327 audit(1752531120.718:1647): proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:00.731431 kernel: audit: type=1105 audit(1752531120.729:1648): pid=6103 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:00.729000 audit[6103]: USER_START pid=6103 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:00.730000 audit[6105]: CRED_ACQ pid=6105 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:00.737485 kernel: audit: type=1103 audit(1752531120.730:1649): pid=6105 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:00.843023 sshd[6103]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:00.842000 audit[6103]: USER_END pid=6103 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:00.845428 systemd[1]: sshd@15-10.0.0.118:22-10.0.0.1:56172.service: Deactivated successfully. Jul 14 22:12:00.846151 systemd[1]: session-16.scope: Deactivated successfully. Jul 14 22:12:00.846470 systemd-logind[1202]: Session 16 logged out. Waiting for processes to exit. Jul 14 22:12:00.847041 systemd-logind[1202]: Removed session 16. Jul 14 22:12:00.842000 audit[6103]: CRED_DISP pid=6103 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:00.850751 kernel: audit: type=1106 audit(1752531120.842:1650): pid=6103 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:00.850825 kernel: audit: type=1104 audit(1752531120.842:1651): pid=6103 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:00.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.118:22-10.0.0.1:56172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:04.434000 audit[4113]: AVC avc: denied { watch } for pid=4113 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_10_48.2114878254/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c390,c995 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c390,c995 tclass=file permissive=0 Jul 14 22:12:04.434000 audit[4113]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4002664cc0 a2=fc6 a3=0 items=0 ppid=3813 pid=4113 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c390,c995 key=(null) Jul 14 22:12:04.434000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:12:05.848359 systemd[1]: Started sshd@16-10.0.0.118:22-10.0.0.1:35682.service. Jul 14 22:12:05.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.118:22-10.0.0.1:35682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:05.852137 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 14 22:12:05.852232 kernel: audit: type=1130 audit(1752531125.847:1654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.118:22-10.0.0.1:35682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:05.878000 audit[6117]: USER_ACCT pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:05.880503 sshd[6117]: Accepted publickey for core from 10.0.0.1 port 35682 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:05.881830 sshd[6117]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:05.880000 audit[6117]: CRED_ACQ pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:05.886978 kernel: audit: type=1101 audit(1752531125.878:1655): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:05.887064 kernel: audit: type=1103 audit(1752531125.880:1656): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:05.887089 kernel: audit: type=1006 audit(1752531125.880:1657): pid=6117 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 14 22:12:05.888917 kernel: audit: type=1300 audit(1752531125.880:1657): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0d01290 a2=3 a3=1 items=0 ppid=1 pid=6117 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:05.880000 audit[6117]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0d01290 a2=3 a3=1 items=0 ppid=1 pid=6117 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:05.888235 systemd[1]: Started session-17.scope. Jul 14 22:12:05.888588 systemd-logind[1202]: New session 17 of user core. Jul 14 22:12:05.880000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:05.893233 kernel: audit: type=1327 audit(1752531125.880:1657): proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:05.893295 kernel: audit: type=1105 audit(1752531125.891:1658): pid=6117 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:05.891000 audit[6117]: USER_START pid=6117 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:05.892000 audit[6119]: CRED_ACQ pid=6119 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:05.899955 kernel: audit: type=1103 audit(1752531125.892:1659): pid=6119 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:06.010458 sshd[6117]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:06.010000 audit[6117]: USER_END pid=6117 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:06.010000 audit[6117]: CRED_DISP pid=6117 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:06.015762 systemd[1]: session-17.scope: Deactivated successfully. Jul 14 22:12:06.016348 systemd[1]: sshd@16-10.0.0.118:22-10.0.0.1:35682.service: Deactivated successfully. Jul 14 22:12:06.017942 systemd-logind[1202]: Session 17 logged out. Waiting for processes to exit. Jul 14 22:12:06.019020 kernel: audit: type=1106 audit(1752531126.010:1660): pid=6117 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:06.019099 kernel: audit: type=1104 audit(1752531126.010:1661): pid=6117 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:06.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.118:22-10.0.0.1:35682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:06.018763 systemd-logind[1202]: Removed session 17. Jul 14 22:12:08.228484 kubelet[1999]: E0714 22:12:08.228442 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:12:10.226881 kubelet[1999]: E0714 22:12:10.226835 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:12:11.015117 systemd[1]: Started sshd@17-10.0.0.118:22-10.0.0.1:35684.service. Jul 14 22:12:11.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.118:22-10.0.0.1:35684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:11.016205 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:12:11.016319 kernel: audit: type=1130 audit(1752531131.013:1663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.118:22-10.0.0.1:35684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:11.052000 audit[6172]: USER_ACCT pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.055493 sshd[6172]: Accepted publickey for core from 10.0.0.1 port 35684 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:11.056563 sshd[6172]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:11.052000 audit[6172]: CRED_ACQ pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.060956 kernel: audit: type=1101 audit(1752531131.052:1664): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.061039 kernel: audit: type=1103 audit(1752531131.052:1665): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.063215 kernel: audit: type=1006 audit(1752531131.052:1666): pid=6172 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 14 22:12:11.052000 audit[6172]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc11bf00 a2=3 a3=1 items=0 ppid=1 pid=6172 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:11.066592 kernel: audit: type=1300 audit(1752531131.052:1666): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc11bf00 a2=3 a3=1 items=0 ppid=1 pid=6172 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:11.052000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:11.067991 kernel: audit: type=1327 audit(1752531131.052:1666): proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:11.069779 systemd-logind[1202]: New session 18 of user core. Jul 14 22:12:11.070823 systemd[1]: Started session-18.scope. Jul 14 22:12:11.073000 audit[6172]: USER_START pid=6172 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.073000 audit[6174]: CRED_ACQ pid=6174 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.081067 kernel: audit: type=1105 audit(1752531131.073:1667): pid=6172 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.081141 kernel: audit: type=1103 audit(1752531131.073:1668): pid=6174 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.220826 sshd[6172]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:11.220000 audit[6172]: USER_END pid=6172 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.224895 systemd[1]: Started sshd@18-10.0.0.118:22-10.0.0.1:35692.service. Jul 14 22:12:11.225496 systemd[1]: sshd@17-10.0.0.118:22-10.0.0.1:35684.service: Deactivated successfully. Jul 14 22:12:11.226204 systemd[1]: session-18.scope: Deactivated successfully. Jul 14 22:12:11.221000 audit[6172]: CRED_DISP pid=6172 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.229297 kernel: audit: type=1106 audit(1752531131.220:1669): pid=6172 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.229383 kernel: audit: type=1104 audit(1752531131.221:1670): pid=6172 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.229397 systemd-logind[1202]: Session 18 logged out. Waiting for processes to exit. Jul 14 22:12:11.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.118:22-10.0.0.1:35692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:11.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.118:22-10.0.0.1:35684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:11.230994 systemd-logind[1202]: Removed session 18. Jul 14 22:12:11.257000 audit[6184]: USER_ACCT pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.258948 sshd[6184]: Accepted publickey for core from 10.0.0.1 port 35692 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:11.258000 audit[6184]: CRED_ACQ pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.258000 audit[6184]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe18581f0 a2=3 a3=1 items=0 ppid=1 pid=6184 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:11.258000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:11.260225 sshd[6184]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:11.263667 systemd-logind[1202]: New session 19 of user core. Jul 14 22:12:11.264528 systemd[1]: Started session-19.scope. Jul 14 22:12:11.267000 audit[6184]: USER_START pid=6184 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:11.269000 audit[6187]: CRED_ACQ pid=6187 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:13.464000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:13.464000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000708e00 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:12:13.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:12:13.464000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:13.464000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40018e0fc0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:12:13.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:12:13.600000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:13.600000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=400cfdfda0 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:12:13.600000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:12:13.600000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:13.600000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=4013026990 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:12:13.600000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:12:13.605000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:13.605000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=40130269c0 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:12:13.605000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:12:13.608000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:13.608000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=4012d930a0 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:12:13.608000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:12:13.610000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:13.610000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=4013026a20 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:12:13.610000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:12:13.610000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:13.610000 audit[1888]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=4004b4adc0 a2=fc6 a3=0 items=0 ppid=1717 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c864 key=(null) Jul 14 22:12:13.610000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:12:14.905871 systemd[1]: run-containerd-runc-k8s.io-62efc308b3d237ba7d39db54ef0fb9ac78beb43170c006a03201618888870709-runc.TRFM9l.mount: Deactivated successfully. Jul 14 22:12:17.663631 env[1215]: time="2025-07-14T22:12:17.663579295Z" level=info msg="StopPodSandbox for \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\"" Jul 14 22:12:17.754336 env[1215]: 2025-07-14 22:12:17.720 [WARNING][6237] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:12:17.754336 env[1215]: 2025-07-14 22:12:17.720 [INFO][6237] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Jul 14 22:12:17.754336 env[1215]: 2025-07-14 22:12:17.720 [INFO][6237] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" iface="eth0" netns="" Jul 14 22:12:17.754336 env[1215]: 2025-07-14 22:12:17.720 [INFO][6237] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Jul 14 22:12:17.754336 env[1215]: 2025-07-14 22:12:17.720 [INFO][6237] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Jul 14 22:12:17.754336 env[1215]: 2025-07-14 22:12:17.741 [INFO][6246] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" HandleID="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:12:17.754336 env[1215]: 2025-07-14 22:12:17.741 [INFO][6246] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:12:17.754336 env[1215]: 2025-07-14 22:12:17.741 [INFO][6246] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:12:17.754336 env[1215]: 2025-07-14 22:12:17.749 [WARNING][6246] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" HandleID="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:12:17.754336 env[1215]: 2025-07-14 22:12:17.749 [INFO][6246] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" HandleID="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:12:17.754336 env[1215]: 2025-07-14 22:12:17.750 [INFO][6246] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:12:17.754336 env[1215]: 2025-07-14 22:12:17.752 [INFO][6237] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Jul 14 22:12:17.754767 env[1215]: time="2025-07-14T22:12:17.754364416Z" level=info msg="TearDown network for sandbox \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\" successfully" Jul 14 22:12:17.754767 env[1215]: time="2025-07-14T22:12:17.754410856Z" level=info msg="StopPodSandbox for \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\" returns successfully" Jul 14 22:12:17.755304 env[1215]: time="2025-07-14T22:12:17.755266737Z" level=info msg="RemovePodSandbox for \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\"" Jul 14 22:12:17.755519 env[1215]: time="2025-07-14T22:12:17.755309377Z" level=info msg="Forcibly stopping sandbox \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\"" Jul 14 22:12:17.866721 env[1215]: 2025-07-14 22:12:17.804 [WARNING][6264] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:12:17.866721 env[1215]: 2025-07-14 22:12:17.804 [INFO][6264] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Jul 14 22:12:17.866721 env[1215]: 2025-07-14 22:12:17.804 [INFO][6264] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" iface="eth0" netns="" Jul 14 22:12:17.866721 env[1215]: 2025-07-14 22:12:17.804 [INFO][6264] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Jul 14 22:12:17.866721 env[1215]: 2025-07-14 22:12:17.804 [INFO][6264] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Jul 14 22:12:17.866721 env[1215]: 2025-07-14 22:12:17.851 [INFO][6273] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" HandleID="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:12:17.866721 env[1215]: 2025-07-14 22:12:17.851 [INFO][6273] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:12:17.866721 env[1215]: 2025-07-14 22:12:17.852 [INFO][6273] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:12:17.866721 env[1215]: 2025-07-14 22:12:17.860 [WARNING][6273] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" HandleID="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:12:17.866721 env[1215]: 2025-07-14 22:12:17.860 [INFO][6273] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" HandleID="k8s-pod-network.51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Workload="localhost-k8s-calico--apiserver--7c87d7d578--msz9q-eth0" Jul 14 22:12:17.866721 env[1215]: 2025-07-14 22:12:17.862 [INFO][6273] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:12:17.866721 env[1215]: 2025-07-14 22:12:17.864 [INFO][6264] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2" Jul 14 22:12:17.867122 env[1215]: time="2025-07-14T22:12:17.866760165Z" level=info msg="TearDown network for sandbox \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\" successfully" Jul 14 22:12:17.872614 env[1215]: time="2025-07-14T22:12:17.872549413Z" level=info msg="RemovePodSandbox \"51a8ddaa9fae929bfad6b139595b24b1de95a64446b5f021913b512c69872ff2\" returns successfully" Jul 14 22:12:17.873090 env[1215]: time="2025-07-14T22:12:17.873056974Z" level=info msg="StopPodSandbox for \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\"" Jul 14 22:12:17.965666 env[1215]: 2025-07-14 22:12:17.914 [WARNING][6291] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:12:17.965666 env[1215]: 2025-07-14 22:12:17.915 [INFO][6291] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Jul 14 22:12:17.965666 env[1215]: 2025-07-14 22:12:17.915 [INFO][6291] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" iface="eth0" netns="" Jul 14 22:12:17.965666 env[1215]: 2025-07-14 22:12:17.915 [INFO][6291] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Jul 14 22:12:17.965666 env[1215]: 2025-07-14 22:12:17.915 [INFO][6291] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Jul 14 22:12:17.965666 env[1215]: 2025-07-14 22:12:17.949 [INFO][6299] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" HandleID="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:12:17.965666 env[1215]: 2025-07-14 22:12:17.950 [INFO][6299] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:12:17.965666 env[1215]: 2025-07-14 22:12:17.950 [INFO][6299] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:12:17.965666 env[1215]: 2025-07-14 22:12:17.960 [WARNING][6299] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" HandleID="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:12:17.965666 env[1215]: 2025-07-14 22:12:17.960 [INFO][6299] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" HandleID="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:12:17.965666 env[1215]: 2025-07-14 22:12:17.961 [INFO][6299] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:12:17.965666 env[1215]: 2025-07-14 22:12:17.963 [INFO][6291] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Jul 14 22:12:17.965666 env[1215]: time="2025-07-14T22:12:17.965638417Z" level=info msg="TearDown network for sandbox \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\" successfully" Jul 14 22:12:17.966095 env[1215]: time="2025-07-14T22:12:17.965670457Z" level=info msg="StopPodSandbox for \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\" returns successfully" Jul 14 22:12:17.968722 env[1215]: time="2025-07-14T22:12:17.968688581Z" level=info msg="RemovePodSandbox for \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\"" Jul 14 22:12:17.968808 env[1215]: time="2025-07-14T22:12:17.968726901Z" level=info msg="Forcibly stopping sandbox \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\"" Jul 14 22:12:18.053024 env[1215]: 2025-07-14 22:12:18.014 [WARNING][6317] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:12:18.053024 env[1215]: 2025-07-14 22:12:18.014 [INFO][6317] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Jul 14 22:12:18.053024 env[1215]: 2025-07-14 22:12:18.014 [INFO][6317] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" iface="eth0" netns="" Jul 14 22:12:18.053024 env[1215]: 2025-07-14 22:12:18.014 [INFO][6317] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Jul 14 22:12:18.053024 env[1215]: 2025-07-14 22:12:18.014 [INFO][6317] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Jul 14 22:12:18.053024 env[1215]: 2025-07-14 22:12:18.035 [INFO][6326] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" HandleID="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:12:18.053024 env[1215]: 2025-07-14 22:12:18.035 [INFO][6326] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:12:18.053024 env[1215]: 2025-07-14 22:12:18.035 [INFO][6326] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:12:18.053024 env[1215]: 2025-07-14 22:12:18.044 [WARNING][6326] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" HandleID="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:12:18.053024 env[1215]: 2025-07-14 22:12:18.044 [INFO][6326] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" HandleID="k8s-pod-network.7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Workload="localhost-k8s-calico--apiserver--7c87d7d578--68hlv-eth0" Jul 14 22:12:18.053024 env[1215]: 2025-07-14 22:12:18.045 [INFO][6326] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:12:18.053024 env[1215]: 2025-07-14 22:12:18.050 [INFO][6317] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4" Jul 14 22:12:18.053744 env[1215]: time="2025-07-14T22:12:18.053058212Z" level=info msg="TearDown network for sandbox \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\" successfully" Jul 14 22:12:18.056523 env[1215]: time="2025-07-14T22:12:18.056473417Z" level=info msg="RemovePodSandbox \"7f4dff991c4774e681f519853c78308bbc0b29b25cddf9d3cd591cf5e8736ce4\" returns successfully" Jul 14 22:12:20.525000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:20.530394 kernel: kauditd_printk_skb: 33 callbacks suppressed Jul 14 22:12:20.530491 kernel: audit: type=1400 audit(1752531140.525:1686): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:20.530518 kernel: audit: type=1400 audit(1752531140.525:1687): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:20.525000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:20.525000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002101380 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:12:20.537101 kernel: audit: type=1300 audit(1752531140.525:1687): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002101380 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:12:20.537177 kernel: audit: type=1327 audit(1752531140.525:1687): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:12:20.525000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:12:20.525000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026873c0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:12:20.544067 kernel: audit: type=1300 audit(1752531140.525:1686): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026873c0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:12:20.544124 kernel: audit: type=1327 audit(1752531140.525:1686): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:12:20.525000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:12:20.526000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:20.550368 kernel: audit: type=1400 audit(1752531140.526:1688): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:20.550525 kernel: audit: type=1300 audit(1752531140.526:1688): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40021013a0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:12:20.526000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40021013a0 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:12:20.526000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:12:20.557737 kernel: audit: type=1327 audit(1752531140.526:1688): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:12:20.557809 kernel: audit: type=1400 audit(1752531140.526:1689): avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:20.526000 audit[1859]: AVC avc: denied { watch } for pid=1859 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:12:20.526000 audit[1859]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4003751f20 a2=fc6 a3=0 items=0 ppid=1712 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c422 key=(null) Jul 14 22:12:20.526000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:12:21.530239 sshd[6184]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:21.529000 audit[6184]: USER_END pid=6184 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:21.530000 audit[6184]: CRED_DISP pid=6184 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:21.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.118:22-10.0.0.1:46838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:21.534119 systemd[1]: Started sshd@19-10.0.0.118:22-10.0.0.1:46838.service. Jul 14 22:12:21.538626 systemd[1]: sshd@18-10.0.0.118:22-10.0.0.1:35692.service: Deactivated successfully. Jul 14 22:12:21.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.118:22-10.0.0.1:35692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:21.539575 systemd[1]: session-19.scope: Deactivated successfully. Jul 14 22:12:21.540245 systemd-logind[1202]: Session 19 logged out. Waiting for processes to exit. Jul 14 22:12:21.544981 systemd-logind[1202]: Removed session 19. Jul 14 22:12:21.573000 audit[6334]: USER_ACCT pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:21.575115 sshd[6334]: Accepted publickey for core from 10.0.0.1 port 46838 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:21.574000 audit[6334]: CRED_ACQ pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:21.574000 audit[6334]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc63d7510 a2=3 a3=1 items=0 ppid=1 pid=6334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:21.574000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:21.576684 sshd[6334]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:21.580161 systemd-logind[1202]: New session 20 of user core. Jul 14 22:12:21.580998 systemd[1]: Started session-20.scope. Jul 14 22:12:21.583000 audit[6334]: USER_START pid=6334 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:21.584000 audit[6337]: CRED_ACQ pid=6337 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:25.226570 kubelet[1999]: E0714 22:12:25.226471 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:12:25.367625 systemd[1]: run-containerd-runc-k8s.io-092d784c1f718a298558486a2f40b1f49aec3c3a1ea4844990a3b2e17649bce8-runc.GUbrna.mount: Deactivated successfully. Jul 14 22:12:31.716000 audit[5771]: AVC avc: denied { watch } for pid=5771 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_11_29.3902162052/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c493 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c352,c493 tclass=file permissive=0 Jul 14 22:12:31.718265 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 14 22:12:31.718310 kernel: audit: type=1400 audit(1752531151.716:1699): avc: denied { watch } for pid=5771 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_11_29.3902162052/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c493 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c352,c493 tclass=file permissive=0 Jul 14 22:12:31.716000 audit[5771]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400112aac0 a2=fc6 a3=0 items=0 ppid=5716 pid=5771 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c493 key=(null) Jul 14 22:12:31.727360 kernel: audit: type=1300 audit(1752531151.716:1699): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400112aac0 a2=fc6 a3=0 items=0 ppid=5716 pid=5771 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c493 key=(null) Jul 14 22:12:31.727470 kernel: audit: type=1327 audit(1752531151.716:1699): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:12:31.716000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:12:37.430182 systemd[1]: run-containerd-runc-k8s.io-62efc308b3d237ba7d39db54ef0fb9ac78beb43170c006a03201618888870709-runc.NHfPxx.mount: Deactivated successfully. Jul 14 22:12:38.226843 kubelet[1999]: E0714 22:12:38.226809 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:12:42.220704 sshd[6334]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:42.221000 audit[6334]: USER_END pid=6334 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.221000 audit[6334]: CRED_DISP pid=6334 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.227506 kernel: audit: type=1106 audit(1752531162.221:1700): pid=6334 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.227555 kernel: audit: type=1104 audit(1752531162.221:1701): pid=6334 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.118:22-10.0.0.1:59556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.228239 systemd[1]: Started sshd@20-10.0.0.118:22-10.0.0.1:59556.service. Jul 14 22:12:42.229008 systemd[1]: sshd@19-10.0.0.118:22-10.0.0.1:46838.service: Deactivated successfully. Jul 14 22:12:42.230322 systemd[1]: session-20.scope: Deactivated successfully. Jul 14 22:12:42.233998 kernel: audit: type=1130 audit(1752531162.227:1702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.118:22-10.0.0.1:59556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.235363 systemd-logind[1202]: Session 20 logged out. Waiting for processes to exit. Jul 14 22:12:42.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.118:22-10.0.0.1:46838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.236700 kubelet[1999]: E0714 22:12:42.236655 1999 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:12:42.241004 kernel: audit: type=1131 audit(1752531162.227:1703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.118:22-10.0.0.1:46838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.240456 systemd-logind[1202]: Removed session 20. Jul 14 22:12:42.244000 audit[6437]: NETFILTER_CFG table=filter:149 family=2 entries=20 op=nft_register_rule pid=6437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:12:42.248408 kernel: audit: type=1325 audit(1752531162.244:1704): table=filter:149 family=2 entries=20 op=nft_register_rule pid=6437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:12:42.244000 audit[6437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffe35e01f0 a2=0 a3=1 items=0 ppid=2099 pid=6437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:42.244000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:12:42.255806 kernel: audit: type=1300 audit(1752531162.244:1704): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffe35e01f0 a2=0 a3=1 items=0 ppid=2099 pid=6437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:42.255880 kernel: audit: type=1327 audit(1752531162.244:1704): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:12:42.259000 audit[6437]: NETFILTER_CFG table=nat:150 family=2 entries=26 op=nft_register_rule pid=6437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:12:42.263415 kernel: audit: type=1325 audit(1752531162.259:1705): table=nat:150 family=2 entries=26 op=nft_register_rule pid=6437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:12:42.259000 audit[6437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffe35e01f0 a2=0 a3=1 items=0 ppid=2099 pid=6437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:42.259000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:12:42.271965 kernel: audit: type=1300 audit(1752531162.259:1705): arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffe35e01f0 a2=0 a3=1 items=0 ppid=2099 pid=6437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:42.272069 kernel: audit: type=1327 audit(1752531162.259:1705): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:12:42.272000 audit[6438]: USER_ACCT pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.273974 sshd[6438]: Accepted publickey for core from 10.0.0.1 port 59556 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:42.273000 audit[6438]: CRED_ACQ pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.274000 audit[6438]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff23964d0 a2=3 a3=1 items=0 ppid=1 pid=6438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:42.274000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:42.276002 sshd[6438]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:42.280487 systemd-logind[1202]: New session 21 of user core. Jul 14 22:12:42.281397 systemd[1]: Started session-21.scope. Jul 14 22:12:42.285000 audit[6438]: USER_START pid=6438 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.287000 audit[6442]: CRED_ACQ pid=6442 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.295000 audit[6443]: NETFILTER_CFG table=filter:151 family=2 entries=32 op=nft_register_rule pid=6443 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:12:42.295000 audit[6443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffddbe66b0 a2=0 a3=1 items=0 ppid=2099 pid=6443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:42.295000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:12:42.300000 audit[6443]: NETFILTER_CFG table=nat:152 family=2 entries=26 op=nft_register_rule pid=6443 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:12:42.300000 audit[6443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffddbe66b0 a2=0 a3=1 items=0 ppid=2099 pid=6443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:42.300000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:12:42.579998 sshd[6438]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:42.582000 audit[6438]: USER_END pid=6438 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.582000 audit[6438]: CRED_DISP pid=6438 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.118:22-10.0.0.1:55850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.585823 systemd[1]: Started sshd@21-10.0.0.118:22-10.0.0.1:55850.service. Jul 14 22:12:42.586388 systemd[1]: sshd@20-10.0.0.118:22-10.0.0.1:59556.service: Deactivated successfully. Jul 14 22:12:42.585000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.118:22-10.0.0.1:59556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.587324 systemd[1]: session-21.scope: Deactivated successfully. Jul 14 22:12:42.590864 systemd-logind[1202]: Session 21 logged out. Waiting for processes to exit. Jul 14 22:12:42.591873 systemd-logind[1202]: Removed session 21. Jul 14 22:12:42.632000 audit[6452]: USER_ACCT pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.634459 sshd[6452]: Accepted publickey for core from 10.0.0.1 port 55850 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:42.634000 audit[6452]: CRED_ACQ pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.634000 audit[6452]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf7bbe00 a2=3 a3=1 items=0 ppid=1 pid=6452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:42.634000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:42.636911 sshd[6452]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:42.641126 systemd-logind[1202]: New session 22 of user core. Jul 14 22:12:42.642127 systemd[1]: Started session-22.scope. Jul 14 22:12:42.644000 audit[6452]: USER_START pid=6452 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.646000 audit[6455]: CRED_ACQ pid=6455 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.787254 sshd[6452]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:42.787000 audit[6452]: USER_END pid=6452 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.787000 audit[6452]: CRED_DISP pid=6452 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:42.792193 systemd[1]: sshd@21-10.0.0.118:22-10.0.0.1:55850.service: Deactivated successfully. Jul 14 22:12:42.791000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.118:22-10.0.0.1:55850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.793078 systemd[1]: session-22.scope: Deactivated successfully. Jul 14 22:12:42.793653 systemd-logind[1202]: Session 22 logged out. Waiting for processes to exit. Jul 14 22:12:42.794432 systemd-logind[1202]: Removed session 22. Jul 14 22:12:46.094959 systemd[1]: run-containerd-runc-k8s.io-10368e580f1366013b1269016ae8f59f9d8e137a364b5a1f871dc54f443ae45d-runc.QACCaN.mount: Deactivated successfully. Jul 14 22:12:47.431000 audit[6487]: NETFILTER_CFG table=filter:153 family=2 entries=20 op=nft_register_rule pid=6487 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:12:47.434032 kernel: kauditd_printk_skb: 27 callbacks suppressed Jul 14 22:12:47.434110 kernel: audit: type=1325 audit(1752531167.431:1725): table=filter:153 family=2 entries=20 op=nft_register_rule pid=6487 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:12:47.431000 audit[6487]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc0c1af90 a2=0 a3=1 items=0 ppid=2099 pid=6487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.441350 kernel: audit: type=1300 audit(1752531167.431:1725): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc0c1af90 a2=0 a3=1 items=0 ppid=2099 pid=6487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.431000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:12:47.443507 kernel: audit: type=1327 audit(1752531167.431:1725): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:12:47.444000 audit[6487]: NETFILTER_CFG table=nat:154 family=2 entries=110 op=nft_register_chain pid=6487 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:12:47.444000 audit[6487]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffc0c1af90 a2=0 a3=1 items=0 ppid=2099 pid=6487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.453392 kernel: audit: type=1325 audit(1752531167.444:1726): table=nat:154 family=2 entries=110 op=nft_register_chain pid=6487 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:12:47.453490 kernel: audit: type=1300 audit(1752531167.444:1726): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffc0c1af90 a2=0 a3=1 items=0 ppid=2099 pid=6487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.444000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:12:47.455465 kernel: audit: type=1327 audit(1752531167.444:1726): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:12:47.791060 systemd[1]: Started sshd@22-10.0.0.118:22-10.0.0.1:55864.service. Jul 14 22:12:47.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.118:22-10.0.0.1:55864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:47.795411 kernel: audit: type=1130 audit(1752531167.789:1727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.118:22-10.0.0.1:55864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:47.821000 audit[6489]: USER_ACCT pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:47.822948 sshd[6489]: Accepted publickey for core from 10.0.0.1 port 55864 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:47.824928 sshd[6489]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:47.823000 audit[6489]: CRED_ACQ pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:47.830123 kernel: audit: type=1101 audit(1752531167.821:1728): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:47.830232 kernel: audit: type=1103 audit(1752531167.823:1729): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:47.832759 kernel: audit: type=1006 audit(1752531167.823:1730): pid=6489 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 14 22:12:47.823000 audit[6489]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2eae780 a2=3 a3=1 items=0 ppid=1 pid=6489 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.823000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:47.834559 systemd-logind[1202]: New session 23 of user core. Jul 14 22:12:47.835260 systemd[1]: Started session-23.scope. Jul 14 22:12:47.837000 audit[6489]: USER_START pid=6489 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:47.839000 audit[6491]: CRED_ACQ pid=6491 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:47.995533 sshd[6489]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:47.995000 audit[6489]: USER_END pid=6489 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:47.995000 audit[6489]: CRED_DISP pid=6489 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:47.998784 systemd[1]: sshd@22-10.0.0.118:22-10.0.0.1:55864.service: Deactivated successfully. Jul 14 22:12:47.999696 systemd[1]: session-23.scope: Deactivated successfully. Jul 14 22:12:47.997000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.118:22-10.0.0.1:55864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:48.000237 systemd-logind[1202]: Session 23 logged out. Waiting for processes to exit. Jul 14 22:12:48.001009 systemd-logind[1202]: Removed session 23. Jul 14 22:12:52.999946 systemd[1]: Started sshd@23-10.0.0.118:22-10.0.0.1:42980.service. Jul 14 22:12:52.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.118:22-10.0.0.1:42980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:53.000883 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 14 22:12:53.000947 kernel: audit: type=1130 audit(1752531172.998:1736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.118:22-10.0.0.1:42980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:53.030000 audit[6506]: USER_ACCT pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:53.032398 sshd[6506]: Accepted publickey for core from 10.0.0.1 port 42980 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:53.033928 sshd[6506]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:53.032000 audit[6506]: CRED_ACQ pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:53.038532 kernel: audit: type=1101 audit(1752531173.030:1737): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:53.038605 kernel: audit: type=1103 audit(1752531173.032:1738): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:53.038629 kernel: audit: type=1006 audit(1752531173.032:1739): pid=6506 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 14 22:12:53.039878 systemd[1]: Started session-24.scope. Jul 14 22:12:53.040264 systemd-logind[1202]: New session 24 of user core. Jul 14 22:12:53.040894 kernel: audit: type=1300 audit(1752531173.032:1739): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5afd960 a2=3 a3=1 items=0 ppid=1 pid=6506 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:53.032000 audit[6506]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5afd960 a2=3 a3=1 items=0 ppid=1 pid=6506 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:53.047111 kernel: audit: type=1327 audit(1752531173.032:1739): proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:53.032000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:53.046000 audit[6506]: USER_START pid=6506 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:53.047000 audit[6508]: CRED_ACQ pid=6508 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:53.054031 kernel: audit: type=1105 audit(1752531173.046:1740): pid=6506 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:53.054087 kernel: audit: type=1103 audit(1752531173.047:1741): pid=6508 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:53.191323 sshd[6506]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:53.190000 audit[6506]: USER_END pid=6506 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:53.194558 systemd[1]: sshd@23-10.0.0.118:22-10.0.0.1:42980.service: Deactivated successfully. Jul 14 22:12:53.195507 systemd[1]: session-24.scope: Deactivated successfully. Jul 14 22:12:53.190000 audit[6506]: CRED_DISP pid=6506 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:53.196071 systemd-logind[1202]: Session 24 logged out. Waiting for processes to exit. Jul 14 22:12:53.197115 systemd-logind[1202]: Removed session 24. Jul 14 22:12:53.199050 kernel: audit: type=1106 audit(1752531173.190:1742): pid=6506 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:53.199122 kernel: audit: type=1104 audit(1752531173.190:1743): pid=6506 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:53.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.118:22-10.0.0.1:42980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:58.196410 systemd[1]: Started sshd@24-10.0.0.118:22-10.0.0.1:42996.service. Jul 14 22:12:58.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.118:22-10.0.0.1:42996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:58.197687 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:12:58.197766 kernel: audit: type=1130 audit(1752531178.195:1745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.118:22-10.0.0.1:42996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:58.235000 audit[6543]: USER_ACCT pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:58.237167 sshd[6543]: Accepted publickey for core from 10.0.0.1 port 42996 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:58.239009 sshd[6543]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:58.237000 audit[6543]: CRED_ACQ pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:58.243493 kernel: audit: type=1101 audit(1752531178.235:1746): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:58.243582 kernel: audit: type=1103 audit(1752531178.237:1747): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:58.245688 kernel: audit: type=1006 audit(1752531178.237:1748): pid=6543 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 14 22:12:58.237000 audit[6543]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8b18e60 a2=3 a3=1 items=0 ppid=1 pid=6543 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:58.249809 kernel: audit: type=1300 audit(1752531178.237:1748): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8b18e60 a2=3 a3=1 items=0 ppid=1 pid=6543 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:58.237000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:58.251148 kernel: audit: type=1327 audit(1752531178.237:1748): proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:58.252476 systemd-logind[1202]: New session 25 of user core. Jul 14 22:12:58.253418 systemd[1]: Started session-25.scope. Jul 14 22:12:58.256000 audit[6543]: USER_START pid=6543 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:58.261000 audit[6545]: CRED_ACQ pid=6545 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:58.265863 kernel: audit: type=1105 audit(1752531178.256:1749): pid=6543 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:58.265933 kernel: audit: type=1103 audit(1752531178.261:1750): pid=6545 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:58.395685 sshd[6543]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:58.395000 audit[6543]: USER_END pid=6543 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:58.400928 systemd[1]: sshd@24-10.0.0.118:22-10.0.0.1:42996.service: Deactivated successfully. Jul 14 22:12:58.395000 audit[6543]: CRED_DISP pid=6543 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:58.404453 kernel: audit: type=1106 audit(1752531178.395:1751): pid=6543 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:58.404536 kernel: audit: type=1104 audit(1752531178.395:1752): pid=6543 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:58.401766 systemd[1]: session-25.scope: Deactivated successfully. Jul 14 22:12:58.404452 systemd-logind[1202]: Session 25 logged out. Waiting for processes to exit. Jul 14 22:12:58.399000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.118:22-10.0.0.1:42996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:58.405551 systemd-logind[1202]: Removed session 25.